If ethereal displays an ICMP packet from a capture file and a color
filter is in effect, the timestamp format can't be changed
interactively. The -t options work. It doesn't seem to matter what the
color filter is, or if the color filter is defined interactively or
loaded from ~/.ethereal. In my ~/.ethereal I have just one file,
colorfilters, as follows:
# DO NOT EDIT THIS FILE! It was created by Ethereal
@direction@frame.p2p_dir == 0@[47468,56489,59077][0,0,0]
When I first noticed this problem, I was looking at a capture file with
a mixture of ICMP and UDP packets. I found that after clicking on a few
packets to hilight them, I was sometimes able to change the timestamp
format.
I put some debug code into epan/column-utils.c:check_col, and this shows
that cinfo->writable is false. This is as far as I've taken it.
I attach a sample capture file, but as far as I can see, the problem
shows up with any ICMP packet.
Using Mandrake Linux 7.0, kernel 2.2.19-5.2mdk, ethereal 0.9.0, with
GTK+ 1.2.10, with GLib 1.2.10, with libpcap 0.6, with libz 1.1.3,
without SNMP.
Graeme Hewson
Ôò¡ ÿÿ ³q,<xw H H EÀ Hë% ÿw«¬ ¬ ³1 E ,! @£±¬
OÌ `p "¥ ´