Re: Regarding customizing tshark summary display

[Joerg Mayer <jmayer () loplof de>]

On Mon, Feb 24, 2014 at 04:47:09PM +0530, Venkatachalam S wrote:
> I'm writing a custom dissector for my internal project. I'm having a frame
> in the following format.
>
> 32 byte data + eth_hdr + payload
>
> So, there is a 32 byte internal header attached to every packet. All the
> packets coming to my system, will be in the above format.
>
> My problem is,
>
> I want to customize the summary/default display of tshark such that it will
> display a short info of the 32-byte data always. Even if there is an L3 or
> L4 header or any custom headers, the info should be displayed.
>
> I'm trying to understand the column_utils, column_info code and tried to
> use it but I'm not getting the expected result.
>
> Please help me in getting this done. I'm eagerly waiting for your inputs.

After you have added your stuff to the info column but before handing off
to the ethernet dissector do

        col_set_writable(pinfo->cinfo, FALSE);

hth
   Jörg

-- 
Joerg Mayer                                           <jmayer () loplof de>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe