Hi, Wireshark implements a layered view of protocols, like an inverted stack.
frame eth IP UDP QICQ What you can do is disable dissection of any of these protocols. So in your case disable QICQ dissection and be left with: frame eth IP UDP data Go to the menu analyze|Enabled protocols and disabled any unwanted protocol dissectors. Thanx, Jaap On Sat, 6 Jan 2007, Mark Ryden wrote: > Hello, > I am using Version 0.99.4 of wireshark. > > When I am using the wireshark gui and sniffing packets, it displays > in the protocol column names which I prefer it not to show. > For example, when I am receiving a UDP packet in port 8000, it > displays "QICQ" in the protocol column, and when looking at the > UDP packet in the middle window I see: Destination port: irdmi (8000) > > Is there a way to get rid of this , so that when sending UDP packets > it will not display "QICQ" but UDP ? Is there a way to configure certain > protocols/ports to appear as "UDP" and not as something else > in the protocol column while sniffing? > > Regards, > Mark > _______________________________________________ Wireshark-users mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-users
