Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] tshark summary lines

From: Ed Beroset <beroset@xxxxxxxxxxxxxx>
Date: Tue, 02 Oct 2012 15:08:53 -0400
Christopher Maynard wrote:

They are all different:
For bug 2892, if you use -T fields, there's no way to have the info column
information also displayed.  Support would have to be added to be able to
specify something like e.g., "-e col.info"

I think you're right. It would probably be relatively easy to address that one at the same time.

For bug 4314, I interpreted this as the user performing the following steps in
Wireshark: File -> Print -> Output to file: wireshark.out, but then
wireshark.out cut off the long Info column unless a custom column was added.
But now I just tried that and it seemed to work fine, but I don't know how long
the info line must be for this to occur.  So either this bug is already fixed
or more information is needed in order to be able to reproduce it.  (I thought
*maybe* this was the same as bug 7543, but adding a custom column matter for
bug 7543, so I don't think they're the same either.)

I think it's already fixed. I just tried it with a line that had an info line that's 516 characters line and it seemed to have no problem, even when I put another column behind it.

So this new one from ask that Ed mentioned here is about printing both the
entire summary line, which you get with -P, as well as the packet details,
which you get with -V.  Currently if you specify both -P and -V, you get the
packets details only, but no summary line.  I'd say this is a reasonable
request and that this should probably also work with -O <protocols> as well
(any others?).  But best to file an enhancement bug report for it.

Done. It's now input as Bug 7782. I'll see if I can create a patch some time this week.

Ed