Guy Harris wrote:
The data structure used internally to Ethereal for each node in the
protocol tree is a "field_info" structure, as defined in "epan/proto.h".
You might, for example, add a "gboolean" flag "error" or "abnormal" or
something such as that, or a "guint" flag holding an error severity, or
something such as that. You'd also add a new call to "epan/proto.c",
such as
void proto_item_set_error(proto_item *pi);
to set the error flag to TRUE for an item to the specified value (or, if
it's not, you'd pass the value to which it should be set).
Then you'd modify "proto_tree_draw_node()", in "gtk/proto_draw.c", to,
after the "gtk_ctree_insert_node()" call, check that flag and, if
appropriate, set the foreground and background color.
Hmmm, this is a can of worms :-)
There are at least two different types of errors we might like to signal
in some way: checksum/fcs/formatting errors at some level; and protocol
errors/violations.
--
Richard Sharpe, rsharpe@xxxxxxxxxx, LPIC-1
www.samba.org, www.ethereal.com, SAMS Teach Yourself Samba
in 24 Hours, Special Edition, Using Samba