This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is there a way to create a column for Ethernet VLAN priority that displays the value (e.g. 0-7 decimal or 000-111 binary) instead of the verbose traffic class?

I am capturing traffic and exporting to CSV for Excel analysis and graphing. I can export the verbose and then do a search and replace, or formula to glean the value, but that adds a significant amount of post-processing work that could be avoided if Wireshark just displayed the binary or decimal PCP value.

asked 28 Jan '11, 09:31

Nick%20Del%20Regno's gravatar image

Nick Del Regno
1111
accept rate: 0%


Right-click on the column-title and de-select "Show Resolved" (not sure if this is available in 1.4.x though, you might need to install 1.5.0 for it).

permanent link

answered 28 Jan '11, 09:41

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Thanks for the quick reply. I am using a Spirent modified version of 1.4.2 (for their signature decodes) and no "Show Resolved" option exists... Oh well.

(28 Jan '11, 10:53) Nick Del Regno

The "Show Unresolved" option has only been in development versions at the moment. It will apparently be included in the official releas of V1.6.0.

(28 Jan '11, 11:11) KeithFrench

If you can't run 1.5.0, you might be able to use tshark to get what you need.

Try something like:

tshark -r <file> -T fields -e frame.number -e frame.time -e vlan.id -e vlan.priority -e ip.src -e ip.dst -e ... > out.txt

All fields are by default separated by a TAB character which makes importing in Excel pretty easy.

(28 Jan '11, 11:58) SYN-bit ♦♦

Thanks folks for the info. SYNbit, I tried that and it will do the job until "Show Unresolved" is added to an official release. Thanks!

(29 Jan '11, 08:42) Nick Del Regno
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×66
×4

question asked: 28 Jan '11, 09:31

question was seen: 4,840 times

last updated: 29 Jan '11, 08:42

p​o​w​e​r​e​d by O​S​Q​A