User Guide

Customizing Wireshark
164
Privacy password The privacy password. Use '\xDD' for unprintable characters. An
hexadecimal password must be entered as a sequence of '\xDD' characters.
For example the hex password 010203040506 must be entered as
'\x01\x02\x03\x04\x05\x06'.
10.19. Tektronix K12xx/15 RF5 protocols Table
The Tektronix K12xx/15 rf5 file format uses helper files (*.stk) to identify the various protocols that are
used by a certain interface. Wireshark doesn't read these stk files, it uses a table that helps it identify which
lowest layer protocol to use.
Stk file to protocol matching is handled by an Section 10.7, “User Table” with the following fields.
Match string A partial match for an stk filename, the first match wins, so if you have a specific case
and a general one the specific one must appear first in the list.
Protocol This is the name of the encapsulating protocol (the lowest layer in the packet data) it
can be either just the name of the protocol (e.g. mtp2, eth_witoutfcs, sscf-nni ) or the
name of the encapsulation protocol and the "application" protocol over it separated
by a colon (e.g sscop:sscf-nni, sscop:alcap, sscop:nbap, ...)
10.20. User DLTs protocol table
When a pcap file uses one of the user DLTs (147 to 162) wireshark uses this table to know which protocol(s)
to use for each user DLT.
This table is handled by an Section 10.7, “User Table” with the following fields.
DLT One of the user dlts.
Payload protocol This is the name of the payload protocol (the lowest layer in the packet data).
(e.g. "eth" for ethernet, "ip" for IPv4)
Header size If there is a header protocol (before the payload protocol) this tells which size
this header is. A value of 0 disables the header protocol.
Header protocol The name of the header protocol to be used (uses "data" as default).
Trailer size If there is a trailer protocol (after the payload protocol) this tells which size this
trailer is. A value of 0 disables the trailer protocol.
Trailer protocol The name of the trailer protocol to be used (uses "data" as default).