Wireshark custom dictionary.xml... possible?

[Growler]

Is it possible to add a custom dictionary.xml to Wireshark Portable? I have some diameter dictionaries I need to add, and usually I just add them to the "diameter" directory, and reference in "dictionary.xml" (also in ./diameter). Is this possible here? Ive tried adding this information to the $HOME/.wireshark location, but still can't decode correctly.

Any ideas? Thanks!

[probono]

Have you tried unpacking the AppImage with AppImageExtract (it extracts to $HOME/desktop), making your changes, running ./AppRun to test everything works, and finally repacking the with AppImageAssistant?

[Growler]

Thanks, probono, that totally worked! I unpacked Wireshark, then added my own custom diameter definitions and dictionary.xml file to "usr/share/wireshark/diameter". After repackaging, it worked like a charm!

However, I hated the idea of having a portable wireshark with our propriatary diameter definitions embedded inside, so I "crippled" my version by removing the "usr/share/wireshark/diameter" directory altogether, and replacing it with a link to a static location on the host filesystem. This way, Wireshark is still portable, but can't decode diameter unless that directory also exists.

It's a half-assed solution, but I didn't want to create a portable wireshark that could "fall into the wrong hands...". I only mention it because I was surprised it worked, and maybe someone else would find it useful in some few edge-case scenarios...

[probono]

Thanks for your update, yes, using symlinks inside the AppImage is the way to do this.