Wireshark-dev: Re: [Wireshark-dev] Is there anyway to control what will be display in the "prot
From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Fri, 14 Mar 2008 17:42:35 -0400

yenan wrote:
>  
> Hi guys
> I am currently trying to write a plugin dissector for a kind of 
> dedicated packet which will encapsulate some other type of packets(IP, 
> ARP...etc),  I do not want to display the encapsulated packet's protocol 
> in the "protocol column", I will rather to keep the lower layer one's 
> protocol one this column.
>  
> For example ,  if there is a ARP packet encapsulated, I will rather not 
> display ARP on the  "protocol column" , but do display ARP packet 
> details in the "packet detail" pane
>  
> In short, is there anyway I can control what layer's protocol will be 
> display on the "protocol column"?

col_set_writable(..., FALSE) makes it so that no one can write into any
of the columns.  I don't think there is a way to do it for just one
column, though.