> In win32 env,
> is there a command line option for tethereal to display length of the packet
> on one line summary output?
No. There isn't one in the UNIX environment, either.
However, the columns Tethereal shows in the one-line summary output, in
recent versions of Tethereal, are the same as the columns Ethereal shows
in the packet display pane.
To change that list of columns, you can start up Ethereal, select the
"Edit->Preferences" menu item, select the "Columns" tab in the dialog it
pops up, type "Length" (or whatever title you want) into the "Column
title" box, and select "Packet length" from the "Column format" option
menu widget. Then click "New", which will add it at the end of the list
of columns; use the "Up" and "Down" buttons to move it to the position
you want.
Then click the "Save" button, and exit Ethereal.
When you next start Ethereal up, it'll display a column with the length
of the packet - and when you next run Tethereal, it'll show that column
in the non-"-V" output.
> I am capturing some mutlicast packets send to various MAC addresses,
> command line output I use is "tethereal.exe proto 0x4545"
Note that you can probably leave the ".exe" off; you can definitely do
so from the Windows "Command Prompt" or "MS-DOS Prompt" window (at least
on NT/2000, and probably on 95/98 as well), and I think you can do so
from, say, a Cygwin shell window as well.
