Network Analysis Using Wireshark 2 Cookbook(Second Edition)
上QQ阅读APP看书,第一时间看更新

Column preferences

In the column preferences, you can add or delete columns. The default columns that we see in the packet pane are the No., Time, Source, Destination, Protocol, Length, and Info, shown in the following screenshot:

To add a new column to the packet pane:

  • You can configure one of the predefined parameters in the Field Name to be added as a new column. Among these fields are time delta, IP DSCP value, port numbers, and others.
  • A very important feature comes up when you fill in Custom in the field type. In this case, you can fill in any filter string for Field Name. You can, for example, add the following:
    • Add the string tcp.window_size to view the TCP window size (which influences performance)
    • Add the string ip.ttl to view the IP time-to-live (TTL) parameter of every packet
    • Add rtp.marker to view every time a marker is set in an RTP packet
To apply a column, you can also choose a field in a packet in the Packet Details pane, right-click, and choose Apply as Column. The column will be added to the Packet List pane.

As we will see in later chapters, this feature will assist us in the fast resolution of network problems.