0.000000 192.168.0.106 -> 192.168.0.207 TCP 3134 > www [SYN] Seq=0 Ack=0
Win=57344 Len=0 MSS=1460 WS=0 TSV=2360826 TSER=0 tcp.dstport == 80
tcp.srcport == 3134
0.000171 192.168.0.207 -> 192.168.0.106 TCP www > 3134 [SYN, ACK] Seq=0
Ack=1 Win=16384 Len=0 MSS=1460 WS=0 TSV=877291648 TSER=2360826
tcp.dstport == 3134 tcp.srcport == 80
0.116934 192.168.0.106 -> 192.168.0.207 TCP 3134 > www [SYN] Seq=0 Ack=0
Win=57344 Len=0 MSS=1460 WS=0 TSV=2360826 TSER=0 tcp.dstport == 80
tcp.srcport == 3134
This is an example by running
tethereal -z proto,colinfo,tcp.srcport,tcp.srcport -z
proto,colinfo,tcp.dstport,tcp.dstport port 80
I was able to add the specific values to the colinfo output line that you
see in tethereal.
You should be able to this with any value.
Once you determine their name from the ethereal gui.
On Tue, 27 Apr 2004, roycey cheeran wrote:
> Hi
>
> Thank you for the reply but it did not serve the purpose. What i exactly want is that, for eg in the following HTTP line of the Tethereal output
>
> 3.951639 192.168.0.5 -> 207.46.75.28 HTTP GET /msdownload/update/v3-19990518/cabpool HTTP/1.1
>
> I want the TCP source port to be specified anywhere in such lines. Can you plz help me with this????
>
> Plz reply as early as possible.
>
> Thank You
>
> Roycey Cheeran
>
> Ober Heim <ober@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
> You can also run with the -z proto,colinfo,somevar,somevar
> to get it added to col_info
> On Tue, 27 Apr 2004, Martin Regner wrote:
>
> >
> >
> > Roycey Cheeran wrote:
> >
> > >
> > >
> > > > > <
> > >
> >
> > You can add source and destination ports to the summary printout for Ethereal/Tethereal by
> > changing the value for column.format in the preferences file either manually or by
> > using the Edit/Preferences/User Interface/Columns dialogue from Ethereal.
> >
> > If you do it from Ethereal then you can e.g. add a column "Destination port (unresolved)" which will correspond
> > to %uD in the preference file.
> >
> > Please note that Ethereal needs to be restarted when you have changed the settings (and pressed "Save") in order to
> > use the new column formats.
> >
> > The same preferences file will be used by Ethereal and Tethereal.
> >
> > Below is an extract from my preferences file. The location of the file may vary depending on what OS you are using, e.g.
> > C:/Documents and Settings/Martin/Application Data/Ethereal/preferences
> > # Packet list column format.
> >
> > # Each pair of strings consists of a column title and its format.
> >
> > column.format: "No.", "%m", "Time", "%t", "Source", "%s", "Destination",
> >
> > "%d", "S_port", "%uS", "D_port", "%uD", "Len", "%L",
> >
> > "Protocol", "%p", "Info", "%i"
> >
>
>
> ---------------------------------
> Do you Yahoo!?
> Win a $20,000 Career Makeover at Yahoo! HotJobs