Ethereal-users: [Ethereal-users] Protocol resolution and absolute time

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Piccola,Richard M." <rpiccola@xxxxxxxxx>
Date: Tue, 24 Oct 2000 11:12:42 -0400
Gang-

I'm trying to create a summary text dump from a Net X-Ray .cap file that
consistently resolves the PROTOCOL field in an ethernet packet.

What I mean is that sometimes Ethereal resolves well-known TCP protocols
like HTTP or FTP or UDP protocols like SNMP, and sometimes (perhaps only
for not-well-known protocols) it doesn't.  I'd prefer that it always say
"TCP", "UDP", "ICMP", etc. for the protocol field and let ME do the
resolution based on the port number.  Is this possible?

Also, it seems like the "Absolute time" display doesn't include the
date. I know the date is in the .cap file, and the man page advertises
the date should be displayed, but I can't get it.  Is this a bug? 

Thanks.

Richard Piccola
begin:vcard 
n:Piccola;Richard M.
tel;work:(732) 389-5694
x-mozilla-html:FALSE
org:Mitre Corporation;W072
adr:;;12 Christopher Way;Eatontown;NJ;07724;
version:2.1
email;internet:rpiccola@xxxxxxxxx
title:Senior Communications Engineer
fn:Richard M. Piccola
end:vcard