wireshark-dev October 2010 archive
Main Archive Page > Month Archives  > wireshark-dev archives
wireshark-dev: Re: [Wireshark-dev] [Wireshark-commits] rev 34186

Re: [Wireshark-dev] [Wireshark-commits] rev 34186: /trunk/ /trunk/epan/: column-utils.c column.c column.h column_info.h epan.c epan.h prefs.c proto.c proto.h /trunk/gtk/: main.c main_packet_list.c new_packet_list.c prefs_column.c prefs_column.h

From: Sake Blok <sake_at_nospam>
Date: Tue Oct 05 2010 - 20:19:29 GMT
To: Developer support list for Wireshark <wireshark-dev@wireshark.org>

On 5 okt 2010, at 21:06, Stig Bjørlykke wrote:

> On Wed, Sep 22, 2010 at 10:56 PM, <sake@wireshark.org> wrote:
>> When using a custom column, make it possible to select which occurrence to show if the field has multiple occurrences.
> Did this change also change the output from "tshark -Tfields -e ip.addr"?
> Do we have to add support for "-e ip.addr[1]"?

Nope, tshark -T fields and wireshark are now not totally in sync. In tshark you can select the first, last or all occurrences, but only for all fields at once. Of course one can use the normal column output for specific references. However, it would be better to have the -T fields option take something like ip.addr[1] indeed.

There is always stuff to work on more than there is time to work on the stuff ;-)


Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev