Wireshark-dev: Re: [Wireshark-dev] wireshark
From: Eloy Paris <[email protected]>
Date: Thu, 19 Jun 2008 11:28:30 -0400
On Wed, Jun 18, 2008 at 06:11:42PM +0400, Abhik Sarkar wrote:

> I believe the data type provided by the field registration it is also
> used by various functions like (but not limited to):
>  - tshark when it is converting a capture to some text based format (like PDML).
>  - column sorting
> 
> HTH
> Abhik.
> 
> On Wed, Jun 18, 2008 at 5:55 PM, Gilbert Ramirez <[email protected]> wrote:
> > It's needed so that the display filter engine knows about your fields.

Is it not also used for displaying field names that are shown when one
expands the protocol tree (or when running tshark with -V)? I would have
thought that the display filter engine's use of fields came after the
other uses...

Cheers,

Eloy Paris.-