ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Is there anyway to control what will be display in the "prot

From: yenan <yen2@xxxxxxxxxxx>
Date: Mon, 17 Mar 2008 15:25:18 +0000


> Date: Fri, 14 Mar 2008 17:42:35 -0400
> From: jeff.morriss.ws@xxxxxxxxx
> To: wireshark-dev@xxxxxxxxxxxxx
> Subject: Re: [Wireshark-dev] Is there anyway to control what will be display in the "protocol column"?
>
Thans
I tried
col_set_writable(pinfo->cinfo, FALSE); 
This will keep Protocol column without overwirte, what about others? such as INFO ,Source and Dest. Columns?
 
I tried col_set_writable(pinfo->src, FALSE)....etc, none of them worked, and I searched them from internet , seems there is very little information!
 
Thank you very much
 

> yenan wrote:
> >
> > Hi guys
> > I am currently trying to write a plugin dissector for a kind of
> > dedicated packet which will encapsulate some other type of packets(IP,
> > ARP...etc), I do not want to display the encapsulated packet's protocol
> > in the "protocol column", I will rather to keep the lower layer one's
> > protocol one this column.
> >
> > For example , if there is a ARP packet encapsulated, I will rather not
> > display ARP on the "protocol column" , but do display ARP packet
> > details in the "packet detail" pane
> >
> > In short, is there anyway I can control what layer's protocol will be
> > display on the "protocol column"?
>
> col_set_writable(..., FALSE) makes it so that no one can write into any
> of the columns. I don't think there is a way to do it for just one
> column, though.> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev



使锟斤拷锟斤拷一锟斤拷 Windows Live Messenger 锟斤拷锟缴斤拷锟斤拷锟酵癸拷锟斤拷锟斤拷 锟斤拷锟斤拷锟斤拷锟介!