Re: [Wireshark-users] How do I go about creating a custom packet data decode

2007-11-21 Thread Guy Harris
Owens, Neil wrote: > I'm up against it here and just need to (simply?) XOR all packet data > with a HEX value. "All packet data" in the sense of "every single packet captured", or "all packet data" as in "all packet data for some particular protocol"?

Re: [Wireshark-users] How do I go about creating a custom packet data decode

2007-11-21 Thread Jaap Keuter
Hi, I don't know why you need this but the most definite way to do it is patch dissect_packet in epan/packet.c. Just insert the line int i; for (i=0; icap_len; i++) pd[i] ^= YOUR_VALUE_HERE; before the call to tvb_new_real_data() and recompile Wireshark. This will XOR all packet data of all packe

Re: [Wireshark-users] How do I go about creating a custom packet data decode

2007-11-21 Thread Stephen Fisher
On Wed, Nov 21, 2007 at 01:59:54PM -, Owens, Neil wrote: > I'm up against it here and just need to (simply?) XOR all packet data > with a HEX value. I just don't know enough about Wireshark to be able > to do this . While I'm not asking for a complete solution could > someone point me at som