Ethereal-dev: [Ethereal-dev] Can't change timestamp format on ICMP packet

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Graeme Hewson <ghewson@xxxxxxxxxxxxxxxxxxx>
Date: Sun, 30 Dec 2001 19:13:43 +0000
If ethereal displays an ICMP packet from a capture file and a color
filter is in effect, the timestamp format can't be changed
interactively.  The -t options work.  It doesn't seem to matter what the
color filter is, or if the color filter is defined interactively or
loaded from ~/.ethereal.  In my ~/.ethereal I have just one file,
colorfilters, as follows:

# DO NOT EDIT THIS FILE!  It was created by Ethereal
@direction@frame.p2p_dir == 0@[47468,56489,59077][0,0,0]

When I first noticed this problem, I was looking at a capture file with
a mixture of ICMP and UDP packets.  I found that after clicking on a few
packets to hilight them, I was sometimes able to change the timestamp
format.

I put some debug code into epan/column-utils.c:check_col, and this shows
that cinfo->writable is false.  This is as far as I've taken it.

I attach a sample capture file, but as far as I can see, the problem
shows up with any ICMP packet.

Using Mandrake Linux 7.0, kernel 2.2.19-5.2mdk, ethereal 0.9.0, with
GTK+ 1.2.10, with GLib 1.2.10, with libpcap 0.6, with libz 1.1.3,
without SNMP.


Graeme Hewson
Ôò¡ÿÿ³q,<xwHHEÀHë%ÿw«¬¬³1E,!@£±¬
OÌ`p"¥´