You mean something like this, which does exactly that? https://code.google.com/archive/p/protobuf-wireshark/ https://code.google.com/archive/p/protobuf-wiresha

You mean something like this, which does exactly that? https://code.google.com/archive/p/protobuf-wireshark/ https://code.google.com/archive/p/protobuf-wireshark/ Sure, you don't know the NAME of the field, but you can see the ID of it.