Ethereal-users: [Ethereal-users] define output in tethereal

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Niklas Abrahamsson (KI/EAB)" <niklas.abrahamsson@xxxxxxxxxxxx>
Date: Fri, 28 Oct 2005 11:16:24 +0200
Is there a reason why you can't define the output based on what fields you want?
With the filters already in place it seems like it shouldn't really be a problem.

like the  -R command except that instead of filtering out all the packets the packets and getting an output of the whole packets that corresponds to the filtering. with some usage like: -Display "frame.pkt_len" which would then give you a list of only the packet lengths of all the packets in a dump-file that pass the additional filtering.

Does this make sense?

//Nicklas