Owens, Neil wrote: > Steve > > It's for all UDP traffic on a specific port. I'm currently on Windows > XP, but if a flavour of Linux makes it easier, then so be it.
In that case, you'd probably want to make a copy of the packet data, XOR it, and add the XORed data as a new data source for the packet. The function tacplus_decrypted_tvb_setup() in packet-tacacs.c provides a pretty good (and well-commented) example of this. _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
