Wireshark-users: Re: [Wireshark-users] Packet Dissector - Generate multiple entries in Packet Lis
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 15 Jun 2010 11:26:33 -0700
On Jun 15, 2010, at 11:15 AM, Gus Ishere wrote:

> Is there a way for a single UDP packet to produce several entries in the packet list?

No.

> I think that I would have a dissector for the entire UDP packet, which would then identify the subpackets and pass these through a subpacket dissector. I think this is what would make most sense in analyzing this protocol,

Yes, that's what is done in this and other circumstances.

That won't cause multiple packets to show up in the packet list; however, it will show separate entities in the packet detail.