/usr/share/doc/wireshark-doc/wsug_html_chunked/ChCustProtocolDissectionSection.html is in wireshark-doc 2.0.2+ga16e22e-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>10.4. Control Protocol dissection</title><link rel="stylesheet" type="text/css" href="ws.css"><meta name="generator" content="DocBook XSL Stylesheets V1.79.1"><link rel="home" href="index.html" title="Wireshark User Guide"><link rel="up" href="ChapterCustomize.html" title="Chapter 10. Customizing Wireshark"><link rel="prev" href="ChCustColorizationSection.html" title="10.3. Packet colorization"><link rel="next" href="ChCustPreferencesSection.html" title="10.5. Preferences"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">10.4. Control Protocol dissection</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ChCustColorizationSection.html">Prev</a> </td><th width="60%" align="center">Chapter 10. Customizing Wireshark</th><td width="20%" align="right"> <a accesskey="n" href="ChCustPreferencesSection.html">Next</a></td></tr></table><hr></div><div class="section"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ChCustProtocolDissectionSection"></a>10.4. Control Protocol dissection</h2></div></div></div><p>The user can control how protocols are dissected.</p><p>Each protocol has its own dissector, so dissecting a complete packet will
typically involve several dissectors. As Wireshark tries to find the right
dissector for each packet (using static “routes” and heuristics ``guessing"),
it might choose the wrong dissector in your specific case. For example,
Wireshark won’t know if you use a common protocol on an uncommon TCP port, e.g.
using HTTP on TCP port 800 instead of the standard port 80.</p><p>There are two ways to control the relations between protocol dissectors: disable
a protocol dissector completely or temporarily divert the way Wireshark calls
the dissectors.</p><div class="section"><div class="titlepage"><div><div><h3 class="title"><a name="ChAdvEnabledProtocols"></a>10.4.1. The “Enabled Protocols” dialog box</h3></div></div></div><p>The Enabled Protocols dialog box lets you enable or disable specific protocols.
All protocols are enabled by default. When a protocol is disabled, Wireshark
stops processing a packet whenever that protocol is encountered.</p><div class="note" style="margin-left: 0.5in; margin-right: 0.5in;"><table border="0" summary="Note"><tr><td rowspan="2" align="center" valign="top" width="25"><img alt="[Note]" src="wsug_graphics/note.svg"></td><th align="left">Note</th></tr><tr><td align="left" valign="top"><p>Disabling a protocol will prevent information about higher-layer protocols from
being displayed. For example, suppose you disabled the IP protocol and selected
a packet containing Ethernet, IP, TCP, and HTTP information. The Ethernet
information would be displayed, but the IP, TCP and HTTP information would not -
disabling IP would prevent it and the other protocols from being displayed.</p></td></tr></table></div><p>To enable or disable protocols select <span class="guimenu">Analyze</span> → <span class="guimenuitem">Enabled Protocols…</span>.
Wireshark will pop up the “Enabled Protocols” dialog box as shown in
<a class="xref" href="ChCustProtocolDissectionSection.html#ChAdvEnabledProtocolsFig" title="Figure 10.4. The “Enabled Protocols” dialog box">Figure 10.4, “The “Enabled Protocols” dialog box”</a>.</p><div class="figure"><a name="ChAdvEnabledProtocolsFig"></a><p class="title"><b>Figure 10.4. The “Enabled Protocols” dialog box</b></p><div class="figure-contents"><div class="mediaobject"><img src="wsug_graphics/ws-enabled-protocols.png" alt="wsug_graphics/ws-enabled-protocols.png"></div></div></div><br class="figure-break"><p>To disable or enable a protocol, simply click on it using the mouse or press the
space bar when the protocol is highlighted. Note that typing the first few
letters of the protocol name when the Enabled Protocols dialog box is active
will temporarily open a search text box and automatically select the first
matching protocol name (if it exists).</p><p>You must use the <span class="guibutton">Save</span> button to save your settings. The <span class="guibutton">OK</span> or
<span class="guibutton">Apply</span> buttons will not save your changes permanently and they will be
lost when Wireshark is closed.</p><p>You can choose from the following actions:</p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem">
<span class="guibutton">Enable All</span>: Enable all protocols in the list.
</li><li class="listitem">
<span class="guibutton">Disable All</span>: Disable all protocols in the list.
</li><li class="listitem">
<span class="guibutton">Invert</span>: Toggle the state of all protocols in the list.
</li><li class="listitem">
<span class="guibutton">OK</span>: Apply the changes and close the dialog box.
</li><li class="listitem">
<span class="guibutton">Apply</span>: Apply the changes and keep the dialog box open.
</li><li class="listitem">
<span class="guibutton">Save</span>: Save the settings to the disabled_protos, see <a class="xref" href="AppFiles.html" title="Appendix B. Files and Folders">Appendix B, <i>Files and Folders</i></a> for details.
</li><li class="listitem">
<span class="guibutton">Cancel</span>: Cancel the changes and close the dialog box.
</li></ol></div></div><div class="section"><div class="titlepage"><div><div><h3 class="title"><a name="ChAdvDecodeAs"></a>10.4.2. User Specified Decodes</h3></div></div></div><p>The “Decode As” functionality lets you temporarily divert specific protocol
dissections. This might be useful for example, if you do some uncommon
experiments on your network.</p><p>Decode As is accessed by selecting the <span class="guimenu">Analyze</span> → <span class="guimenuitem">Decode As…</span>. Wireshark
will pop up the “Decode As” dialog box as shown in <a class="xref" href="ChCustProtocolDissectionSection.html#ChAdvDecodeAsFig" title="Figure 10.5. The “Decode As” dialog box">Figure 10.5, “The “Decode As” dialog box”</a>.</p><div class="figure"><a name="ChAdvDecodeAsFig"></a><p class="title"><b>Figure 10.5. The “Decode As” dialog box</b></p><div class="figure-contents"><div class="mediaobject"><img src="wsug_graphics/ws-decode-as.png" alt="wsug_graphics/ws-decode-as.png"></div></div></div><br class="figure-break"><p>The content of this dialog box depends on the selected packet when it was opened.</p><p>These settings will be lost if you quit Wireshark or change profile unless you
save the entries in the <span class="emphasis"><em>Show User Specified Decodes…</em></span> windows
(<a class="xref" href="ChCustProtocolDissectionSection.html#ChAdvDecodeAsShow" title="10.4.3. Show User Specified Decodes">Section 10.4.3, “Show User Specified Decodes”</a>).</p><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem">
<span class="guibutton">Decode</span>: Decode packets the selected way.
</li><li class="listitem">
<span class="guibutton">Do not decode</span>: Do not decode packets the selected way.
</li><li class="listitem">
<span class="guibutton">Link/Network/Transport</span>: Specify the network layer at which “Decode
As” should take place. Which of these pages are available depends on the
content of the selected packet when this dialog box is opened.
</li><li class="listitem">
<span class="guibutton">Show Current</span>: Open a dialog box showing the current list of user
specified decodes.
</li><li class="listitem">
<span class="guibutton">OK</span>: Apply the currently selected decode and close the dialog box.
</li><li class="listitem">
<span class="guibutton">Apply</span>: Apply the currently selected decode and keep the dialog box
open.
</li><li class="listitem">
<span class="guibutton">Cancel</span>: Cancel the changes and close the dialog box.
</li></ol></div></div><div class="section"><div class="titlepage"><div><div><h3 class="title"><a name="ChAdvDecodeAsShow"></a>10.4.3. Show User Specified Decodes</h3></div></div></div><p>This dialog box shows the currently active user specified decodes. These entries
can be saved into current profile for later session.</p><div class="figure"><a name="ChAdvDecodeAsShowFig"></a><p class="title"><b>Figure 10.6. The “Decode As: Show” dialog box</b></p><div class="figure-contents"><div class="mediaobject"><img src="wsug_graphics/ws-decode-as-show.png" alt="wsug_graphics/ws-decode-as-show.png"></div></div></div><br class="figure-break"><div class="orderedlist"><ol class="orderedlist" type="1"><li class="listitem">
<span class="guibutton">OK</span>: Close this dialog box.
</li><li class="listitem">
<span class="guibutton">Save</span>: Save the entries in the table into current profile.
</li><li class="listitem">
<span class="guibutton">Clear</span>: Removes all user specified decodes without updating the profile.
</li></ol></div></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ChCustColorizationSection.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ChapterCustomize.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="ChCustPreferencesSection.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">10.3. Packet colorization </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 10.5. Preferences</td></tr></table></div></body></html>
|