augusti 2009 21:09
Till: wireshark-dev@wireshark.org
Ämne: Re: [Wireshark-dev] Reduce the number of fixed columns?
Hey,
Could someone suggest some custom column expressions to use instead of
the following predefined columns:
* COL_DCE_CALL: /* done by dcerpc */
* COL_DCE_CTX: /* done by dcerpc
Hey,
Could someone suggest some custom column expressions to use instead of
the following predefined columns:
* COL_DCE_CALL: /* done by dcerpc */
* COL_DCE_CTX: /* done by dcerpc */
* COL_BSSGP_TLLI: /* done by packet-bssgp.c */
Kovarththanan Rajaratnam wrote:
Hey,
Those that have
Hey,
Those that have responded seem to be in favour of this and no one has
objected to this so I've taken the liberty to create a wiki page to
document the progress:
http://wiki.wireshark.org/Development/CustomColumnfication
Regards,
Kovarththanan Rajaratn
Jaap Keuter wrote:
Hi,
So what
Hi,
So what you say is keep the metadata and generic protocol elements, the rest is
protocol specific and should go through custom columns.
I can agree with that.
Thanx,
Jaap
Martin Visser wrote:
My take below,
'
With no firm evidence, I would bet that 90% of users are doing pretty
much
My take below,
'
With no firm evidence, I would bet that 90% of users are doing pretty much
vanilla Ethernet packet captures, which is reflected in my thoughts below.
That said, I know I often do 802.11 based captures, but am not interested in
physical layer information all that much. (And I know
Hi,
Now when we have custom columns could we get rid of some of the fixed
columns?
It seems to me that some are not of a general interest.
This is the column enum:
COL_8021Q_VLAN_ID, /* 0) 802.1Q vlan ID */
COL_ABS_DATE_TIME, /* 1) Absolute date and time */
COL_ABS_TIME, /*