Hi,
I have another question concerning more than one PDU in one TCP
segment.
Now I display them in this way:
------------
4 1.090112 192.168.132.1 198.16.16.60 TS KBD_KEY
5 1.118023 198.16.16.60 192.168.132.1 L3X|TS|TS|L3X E_NXCD_PATH_SWITCH
| STD_STRING | STD_STRING | MENU_HANDLE
6 1.289889 192.168.132.1 198.16.16.60 TCP 4000 > 1124 [ACK]
Seq=2082630229 Ack=831098677 Win=8192 Len=0
-------------
Would it be possible to introduce the "multiline feature" for COL_PROT
and COL_INFO?
Then it could be possible to use "\n" as a delimiter in the strings
(instead of "|") and it should be displyed in this way:
------------
4 1.090112 192.168.132.1 198.16.16.60 TS KBD_KEY
5 1.118023 198.16.16.60 192.168.132.1 L3X E_NXCD_PATH_SWITCH
TS STD_STRING
TS STD_STRING
L3X MENU_HANDLE
6 1.289889 192.168.132.1 198.16.16.60 TCP 4000 > 1124 [ACK]
Seq=2082630229 Ack=831098677 Win=8192 Len=0
-------------
It has to be changed in the file.c/print_packets() for the printer
output.
Would it be possible to make such a change for GUI too? I do not know
GTK so I try to ask.
Regards,
Tom
>
> Now due to the ease of the Ethereal API, I've been able to easily
> interpret all these packets in the protocol and display the packet types
> in the Column INFO. That is nice, but it would be lovely if I could
> have every single packet within the packet interpreted fully (like down
> in the middle pane in the tree). Now each packet type has its own
> fields, as many as 70-80 per packet type (a lot of tedious work, but
> worth it). So I've got a growing list of hf_proto_fieldname declarations.
>