This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

VLAN Priority Column Display Value not Verbose Class

0

Is there a way to create a column for Ethernet VLAN priority that displays the value (e.g. 0-7 decimal or 000-111 binary) instead of the verbose traffic class?

I am capturing traffic and exporting to CSV for Excel analysis and graphing. I can export the verbose and then do a search and replace, or formula to glean the value, but that adds a significant amount of post-processing work that could be avoided if Wireshark just displayed the binary or decimal PCP value.

asked 28 Jan '11, 09:31

Nick%20Del%20Regno's gravatar image

Nick Del Regno
1111
accept rate: 0%


One Answer:

0

Right-click on the column-title and de-select "Show Resolved" (not sure if this is available in 1.4.x though, you might need to install 1.5.0 for it).

answered 28 Jan '11, 09:41

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

Thanks for the quick reply. I am using a Spirent modified version of 1.4.2 (for their signature decodes) and no "Show Resolved" option exists... Oh well.

(28 Jan '11, 10:53) Nick Del Regno

The "Show Unresolved" option has only been in development versions at the moment. It will apparently be included in the official releas of V1.6.0.

(28 Jan '11, 11:11) KeithFrench

If you can't run 1.5.0, you might be able to use tshark to get what you need.

Try something like:

tshark -r <file> -T fields -e frame.number -e frame.time -e vlan.id -e vlan.priority -e ip.src -e ip.dst -e ... > out.txt

All fields are by default separated by a TAB character which makes importing in Excel pretty easy.

(28 Jan '11, 11:58) SYN-bit ♦♦

Thanks folks for the info. SYNbit, I tried that and it will do the job until "Show Unresolved" is added to an official release. Thanks!

(29 Jan '11, 08:42) Nick Del Regno