Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: [Ethereal-dev] visited,marked flags info

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Frank Singleton <frank.singleton@xxxxxxxxxxxx>
Date: Wed, 14 Mar 2001 07:57:18 -0600
Hi,

Could anyone tell me where and how the following flags
are  used. I am trying to decide if a packet has been visited
by clicking on it. Is this the visted flag or are there other
meaning for this. And what about "marked".

The reason being, I have some data structures that I wish
to populate when the data is read sequentially say from a logfile.
It will allow me to make useful associateons between packets.

But then I dont want to mess up that structure when people start 
madly clicking packets in any order later.

ie: I am trying to leverage the usefulness of knowing that the 
packets are processed sequentially initially, before people start clicking.

<snip from packet.h">

  struct {
	unsigned int passed_dfilter	: 1; /* 1 = display, 0 = no display */
  	unsigned int encoding		: 2; /* Character encoding (ASCII, EBCDIC...) */
	unsigned int visited		: 1; /* Has this packet been visited yet? 1=Yes,0=No*/
	unsigned int marked             : 1; /* 1 = marked by user, 0 = normal */
  } flags;



Cheers / Frank..

-- 
EUS/SV/Z Frank Singleton      ASO Americas BSS
Office : +1 972 583 3251      ECN 800 33251  
Pager  : +1 800 651 1184      Mobile : +1 214 228 0874
Amateur Radio: VK3FCS/KM5WS   Email : frank.singleton@xxxxxxxxxxxx

Hardware: HP Omnibook 4150 running Redhat Linux 6.2 (2.2.16 kernel).