On Mon, Sep 01, 2003 at 12:39:24PM -0700, Paul Hoffman / VPNC wrote: > Is it easy/possible to either change -V, or to specify my own > contents for what goes into verbose output?
No. "-V" just means "show the full protocol tree". What's in the protocol tree for a particular protocol depends on that protocol's dissector. You'd have to change all the dissectors whose protocol tree you wanted to include only particular items. > Or would it be easier to just post-process the output? Probably. You could also look at the "-z proto,colinfo" option - see the man page. That lets you add to the Info column in Tethereal output the values of various named fields, which might allow you to get the particular fields you want, *if* they're named fields. You'd then run *without* "-V", and extract the field values from the line for the packet.
