> Date: Fri, 14 Mar 2008 17:42:35 -0400
> From: jeff.morriss.ws@xxxxxxxxx
> To: wireshark-dev@xxxxxxxxxxxxx
> Subject: Re: [Wireshark-dev] Is there anyway to control what will be display in the "protocol column"?
>
Thans
I tried
col_set_writable(pinfo->cinfo, FALSE);
This will keep Protocol column without overwirte, what about others? such as INFO ,Source and Dest. Columns?
I tried col_set_writable(pinfo->src, FALSE)....etc, none of them worked, and I searched them from internet , seems there is very little information!
Thank you very much
> yenan wrote:
> >
> > Hi guys
> > I am currently trying to write a plugin dissector for a kind of
> > dedicated packet which will encapsulate some other type of packets(IP,
> > ARP...etc), I do not want to display the encapsulated packet's protocol
> > in the "protocol column", I will rather to keep the lower layer one's
> > protocol one this column.
> >
> > For example , if there is a ARP packet encapsulated, I will rather not
> > display ARP on the "protocol column" , but do display ARP packet
> > details in the "packet detail" pane
> >
> > In short, is there anyway I can control what layer's protocol will be
> > display on the "protocol column"?
>
> col_set_writable(..., FALSE) makes it so that no one can write into any
> of the columns. I don't think there is a way to do it for just one
> column, though.> _______________________________________________
> Wireshark-dev mailing list
> Wireshark-dev@xxxxxxxxxxxxx
> http://www.wireshark.org/mailman/listinfo/wireshark-dev
使用新一代 Windows Live Messenger 轻松交流和共享！ 立即体验！
|
