Ethereal-dev: Re: [Ethereal-dev] Design question about multiple-packet packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Tomas Kukosa <tomas.kukosa@xxxxxxxxxxx>
Date: Wed, 22 Jan 2003 16:49:44 +0100
Hi,
  I have another question concerning more than one PDU in one TCP
segment.
Now I display them in this way:
------------
4 1.090112 192.168.132.1 198.16.16.60  TS       KBD_KEY
5 1.118023 198.16.16.60  192.168.132.1 L3X|TS|TS|L3X E_NXCD_PATH_SWITCH
| STD_STRING | STD_STRING | MENU_HANDLE
6 1.289889 192.168.132.1 198.16.16.60  TCP      4000 > 1124 [ACK]
Seq=2082630229 Ack=831098677 Win=8192 Len=0
-------------

Would it be possible to introduce the "multiline feature" for COL_PROT
and COL_INFO?
Then it could be possible to use "\n" as a delimiter in the strings
(instead of "|") and it should be displyed in this way:
------------
4 1.090112 192.168.132.1 198.16.16.60  TS   KBD_KEY
5 1.118023 198.16.16.60  192.168.132.1 L3X  E_NXCD_PATH_SWITCH
                                       TS   STD_STRING
                                       TS   STD_STRING
                                       L3X  MENU_HANDLE
6 1.289889 192.168.132.1 198.16.16.60  TCP  4000 > 1124 [ACK]
Seq=2082630229 Ack=831098677 Win=8192 Len=0
-------------

It has to be changed in the file.c/print_packets() for the printer
output.
Would it be possible to make such a change for GUI too? I do not know
GTK so I try to ask.
  Regards,
    Tom



> 
> Now due to the ease of the Ethereal API, I've been able to easily
> interpret all these packets in the protocol and display the packet types
> in the Column INFO.  That is nice, but it would be lovely if I could
> have every single packet within the packet interpreted fully (like down
> in the middle pane in the tree).  Now each packet type has its own
> fields, as many as 70-80 per packet type (a lot of tedious work, but
> worth it).  So I've got a growing list of hf_proto_fieldname declarations.
>