On Fri, Nov 24, 2000 at 02:57:40PM +0100, Peter Gervai wrote:
> The question is short: how to display source and destination
> MAC addresses when doing live tethereal session?
In the current version of Tethereal (from the 0.8.14 Ethereal
distribution, or later), you'd have to configure the columns that
Ethereal and Tethereal are to display to include columns that show the
"Hardware src addr" and "Hardware dst addr".
This can be done either by
1) running Ethereal *as the user who will be doing the live
Tethereal session* (which may be root, on UNIX systems),
editing preferences by selecting "Preferences..." from the
"Edit" menu, adding new columns with the format "Hardware src
addr" and "Hardware dst addr" (the UI for this is, alas, a
bit confusing - you type into the "Column title" box the
title for that column, select the appropriate column format
from the "Column format" option menu, and then click the
"New" button; then use "Up" and "Down" to move the item where
you want), clicking the "Save" key, and exiting Ethereal;
2) manually editing that user's "~/.ethereal/preferences" file
and adding to the "column.format" item the titles and formats
for those columns (the title comes first, followed
immediately by the format; the format for "Hardware src addr"
is "%hs" and the format for "Hardware dst addr" is "%hd"; put
the new columns into the list in the order in which you want
them to appear in the display).
It is *VERY IMPORTANT* that you set the preferences for the user under
whose user ID Ethereal/Tethereal will be running when you do the live
capture - if you "su" to root when you run the live capture (which is
normally required on UNIX - note that "UNIX" includes Linux, BSD, and
all the commercial UNIX-flavored OSes out there), you will have to
change *root's* preferences file.
Note that this will change the behavior of Ethereal and Tethereal in all
cases; it doesn't just change Tethereal's behavior, and doesn't just
change the behavior in live captures - there's no way to change one of
those without changing all of them.