On Sun, Jun 17, 2007 at 10:35:53PM +0800, Billie Chan wrote: > On GUI mode I can customer the columns view e.g. add new column for > src port, dst port etc... Yes, if you are using the latest version of Wireshark/tshark (Ethereal didn't support this). You would use the -T fields option along with -e <field name> for each field you wanted to display. Steve