To those on the list who use tethereal a lot but does not follow ethereal-cvs (i know who you are)
I just checked in a new feature for tethereal i think you will enjoy -z proto,colinfo,<filter>,<field> Which can be used to place an arbitrary <field> and its value on the colinfo line for all packets matching <filter>. This option can be used an unlimited number of times on teh command line. Note: in order for tethereal to be able to extract the <field> value from the packet, <field> MUST also be part of the <filter> string. Example: in order to get tethereal to put the nfs filehandle hash on colinfo line for all NFS packets: -z proto,colinfo,nfs&&nfs.fh.hash,nfs.fh.hash have fun, ronnie sahlberg
