Wireshark-dev: Re: [Wireshark-dev] Dealing with aggregated packets
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 2 Jul 2018 13:48:20 -0700
On Jul 2, 2018, at 12:18 PM, Darien Spencer <cusneud@xxxxxxxx> wrote:

> What I had in mind is an option to 'expend' a packet in the main view so its aggregated sub packets are seen in a tree under it
> Here's a mock hoping it's get the idea across:
> https://i.imgur.com/WfSvg6x.png

So is the idea that the "list view" of packets would be turned into a "tree view", and packets with multiple sub packets would have the "open up the tree" triangle to the left, so that you could click on it and go from

  1	0.000000	70.95.212.31	208.219.44.14	IUA (RFC 3057)		66	DATA [Malformed Packet]
> 2	0.000000	11353		10991		RANAP		       490	LocationReportingControl DirectTransfer (DTAP) (MM) Authentication Request CommonID Security...
  3	0.000000	70.95.212.31	208.219.44.14	IUA (RFC 3057)		66	DATA [Malformed Packet]

to

  1	0.000000	70.95.212.31	208.219.44.14	IUA (RFC 3057)		66	DATA [Malformed Packet]
V 2	0.000000	11353		10991		RANAP		       490	LocationReportingControl DirectTransfer (DTAP) (MM) Authentication Request CommonID Security...
							RANAP			30	LocationReportingControl
							RANAP			42	(DTAP) (MM) Authentication Request
							RANAP			66	CommonID
							RANAP			16	SecurityModeCommand
  3	0.000000	70.95.212.31	208.219.44.14	IUA (RFC 3057)		66	DATA [Malformed Packet]

and then click on it again and go back to the original?