Wireshark-users: Re: [Wireshark-users] tcp.flags custom column
From: Kevin Swanson <kswanson@xxxxxxxxxx>
Date: Sat, 3 Jul 2010 09:00:53 -0500


Thanks Martin,

                             I was looking for one field that had  all the flags in readable format.




Martin Visser <martinvisser99@xxxxxxxxx>
Sent by: wireshark-users-bounces@xxxxxxxxxxxxx

07/03/2010 03:45 AM

Please respond to
Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx>

To
Community support list for Wireshark <wireshark-users@xxxxxxxxxxxxx>
cc
Subject
Re: [Wireshark-users] tcp.flags custom column





Just use the flag name, like tcp.flags,syn. The column will then show "Set" or "Not set" as appropriate. (If you just type tcp.flags in the Field name edit box after you have selected Custom, it shows you the completion options, which include all the valid flag names. You obviously need to add a column for each flag you are interested in.

Regards, Martin

MartinVisser99@xxxxxxxxx


On Sat, Jul 3, 2010 at 12:46 PM, Kevin Swanson <kswanson@xxxxxxxxxx> wrote:

Is there a way to add the tcp.flags in the custom column and display the flag instead of showing the hex value?



___________________________________________________________________________
Sent via:    Wireshark-users mailing list <
wireshark-users@xxxxxxxxxxxxx>
Archives:    
http://www.wireshark.org/lists/wireshark-users
Unsubscribe:
https://wireshark.org/mailman/options/wireshark-users
            mailto:
wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    
http://www.wireshark.org/lists/wireshark-users
Unsubscribe:
https://wireshark.org/mailman/options/wireshark-users
           
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe