Wireshark · Ethereal-dev: Re: [Ethereal-dev] An interesting EtherPeek feature

[Ian Schorr <spamcontrol2@xxxxxxxxxxx>]

>  <x-tad-bigger>You can define a specialized packet summary column whose value
> is set based on some filter expressions. (We'd probably use
> display filters for that.

I was actually tinkering around last week with a way to generate a column whose value was derived from a user-defined display filter.  It doesn't look like it would be incredibly difficult.

This might be especially useful if the column was simply a user definable string, where display filters are simply inserted and resolve to strings (i.e. "Reply in: " && smb.response_in), but perhaps also only display the string if certain criteria are met.

Ian</x-tad-bigger>