Frank Singleton wrote:
>
> Jeff Foster wrote:
> >
> > From: Frank Singleton [mailto:frank.singleton@xxxxxxxxxxxx]
> > Sent: Wednesday, March 14, 2001 7:57 AM
> >
> > > Could anyone tell me where and how the following flags
> > > are used. I am trying to decide if a packet has been visited
> > > by clicking on it. Is this the visted flag or are there other
> > > meaning for this. And what about "marked".
> >
> > The visited flag is set when people click on the packet and is
> > unset on the first pass through the data. It was added for just
> > the situation you describe.
>
> Hi,
>
> Thanks for the info.
>
> So just to make sure I understand the order of things here.
>
> When I click on a packet, flags.visited is set BEFORE the
> packet is processed by my dissector, and not AFTER it has
> been processed.Is this true ?
>
> Also, does Reload button clear these flags ?
Let me rephrase it.
When a capture file is initially loaded, all "visited" flags
are 0. Ethereal then makes the first pass through file,
sequentially dissecting each packet. After the packet is
dissected the first time, "visited" is 1. (See the end of
dissect_packet() in epan/packet.c; that's the code that
sets "visited" to 1).
By the time a user clicks on a packet, "visited" will already
be 1 because Ethereal will have already done its first pass
through the packets.
Reload acts just like a normal Close/Open, except that it
doesn't need to ask for a filename. So yes, the reload button
clears the flags and re-dissects the file, just as if the file
had been "opened".
--gilbert
