Wireshark · Ethereal-dev: Re: [Ethereal-dev] Fw: ethereal-dev@xxxxxxxxxxxx

[Guy Harris <guy@xxxxxxxxxxxx>]

On Monday, July 21, 2003, at 2:15 AM, Guy Harris wrote:

> On Mon, Jul 21, 2003 at 03:59:50PM +0800, li wrote:
> > when I decode a packet to a tree, why I have
> > Source or Destination Address:00:10:4b:0a:42:27(00:10:4b
> > Source or Destination Address:00:09:6b:12:87:c1(00:10:6b
> >
> > this two lines?
> >
> > you program don't have these?
>
> Yes, it does.

Sorry, I was thinking of the top-level "Ethernet II" header.

The "Source or Destination Address" entries are *not* displayed in 
Ethereal, because they are added with one of the "_hidden" versions of 
the "proto_tree_add_" routines.  Those routines set the "visible" flag 
in the "field_info" structure to FALSE; your program should not display 
protocol tree items unless "visible" is TRUE.