On Wed, Mar 05, 2008 at 08:34:10PM +0100, Stig Bjørlykke wrote: > We already have the cumulative number of bytes in the frame dissector > (used for the cumulative column), so it's just a matter of adding this > as a generated frame field.
Do we? The Cumulative Bytes column is pulled out of pinfo->fd->cum_bytes. > This field does not always work as expected in the filter, because we > can't add a filter like "frame.cum_len > 1000". But maybe it's better > to have this field than not at all? Hmm.. what would frame.cum_len > 1000 do wrong? I guess it depends on if it's cumulative from the beginning of the capture or for displayed packets. That could get messy. Steve _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
