Ethereal-users: Re: [Ethereal-users] [tethereal] how to simulate tcpdump's -e (show MAC) switch?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxxxxx>
Date: Mon, 27 Nov 2000 22:08:44 -0800
On Fri, Nov 24, 2000 at 02:57:40PM +0100, Peter Gervai wrote:
> The question is short: how to display source and destination
> MAC addresses when doing live tethereal session?

In the current version of Tethereal (from the 0.8.14 Ethereal
distribution, or later), you'd have to configure the columns that
Ethereal and Tethereal are to display to include columns that show the
"Hardware src addr" and "Hardware dst addr".

This can be done either by

	1) running Ethereal *as the user who will be doing the live
	   Tethereal session* (which may be root, on UNIX systems),
	   editing preferences by selecting "Preferences..." from the
	   "Edit" menu, adding new columns with the format "Hardware src
	   addr" and "Hardware dst addr" (the UI for this is, alas, a
	   bit confusing - you type into the "Column title" box the
	   title for that column, select the appropriate column format
	   from the "Column format" option menu, and then click the
	   "New" button; then use "Up" and "Down" to move the item where
	   you want), clicking the "Save" key, and exiting Ethereal;

	2) manually editing that user's "~/.ethereal/preferences" file
	   and adding to the "column.format" item the titles and formats
	   for those columns (the title comes first, followed
	   immediately by the format; the format for "Hardware src addr"
	   is "%hs" and the format for "Hardware dst addr" is "%hd"; put
	   the new columns into the list in the order in which you want
	   them to appear in the display).

It is *VERY IMPORTANT* that you set the preferences for the user under
whose user ID Ethereal/Tethereal will be running when you do the live
capture - if you "su" to root when you run the live capture (which is
normally required on UNIX - note that "UNIX" includes Linux, BSD, and
all the commercial UNIX-flavored OSes out there), you will have to
change *root's* preferences file.

Note that this will change the behavior of Ethereal and Tethereal in all
cases; it doesn't just change Tethereal's behavior, and doesn't just
change the behavior in live captures - there's no way to change one of
those without changing all of them.