[Guy Harris <guy@xxxxxxxxxxxx>]

On Mon, Sep 01, 2003 at 12:39:24PM -0700, Paul Hoffman / VPNC wrote:
> Is it easy/possible to either change -V, or to specify my own 
> contents for what goes into verbose output?

No.

"-V" just means "show the full protocol tree".  What's in the protocol
tree for a particular protocol depends on that protocol's dissector. 
You'd have to change all the dissectors whose protocol tree you wanted
to include only particular items.

> Or would it be easier to just post-process the output?

Probably.

You could also look at the "-z proto,colinfo" option - see the man page.
That lets you add to the Info column in Tethereal output the values of
various named fields, which might allow you to get the particular fields
you want, *if* they're named fields.  You'd then run *without* "-V", and
extract the field values from the line for the packet.