aboutsummaryrefslogtreecommitdiffstats
path: root/docbook/eug_src/EUG_chapter_use.xml
blob: 4daf701211b8b2bca29dc5ee20bf35faf9d3a2ac (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
1263
1264
1265
1266
1267
1268
1269
1270
1271
1272
1273
1274
1275
1276
1277
1278
1279
1280
1281
1282
1283
1284
1285
1286
1287
1288
1289
1290
1291
1292
1293
1294
1295
1296
1297
1298
1299
1300
1301
1302
1303
1304
1305
1306
1307
1308
1309
1310
1311
1312
1313
1314
1315
1316
1317
1318
1319
1320
1321
1322
1323
1324
1325
1326
1327
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
1343
1344
1345
1346
1347
1348
1349
1350
1351
1352
1353
1354
1355
1356
1357
1358
1359
1360
1361
1362
1363
1364
1365
1366
1367
1368
1369
1370
1371
1372
1373
1374
1375
1376
1377
1378
1379
1380
1381
1382
1383
1384
1385
1386
1387
1388
1389
1390
1391
1392
1393
1394
1395
1396
1397
1398
1399
1400
1401
1402
1403
1404
1405
1406
1407
1408
1409
1410
1411
1412
1413
1414
1415
1416
1417
1418
1419
1420
1421
1422
1423
1424
1425
1426
1427
1428
1429
1430
1431
1432
1433
1434
1435
1436
1437
1438
1439
1440
1441
1442
1443
1444
1445
1446
1447
1448
1449
1450
1451
1452
1453
1454
1455
1456
1457
1458
1459
1460
1461
1462
1463
1464
1465
1466
1467
1468
1469
1470
1471
1472
1473
1474
1475
1476
1477
1478
1479
1480
1481
1482
1483
1484
1485
1486
1487
1488
1489
1490
1491
1492
1493
1494
1495
1496
1497
1498
1499
1500
1501
1502
1503
1504
1505
1506
1507
1508
1509
1510
1511
1512
1513
1514
1515
1516
1517
1518
1519
1520
1521
1522
1523
1524
1525
1526
1527
1528
1529
1530
1531
1532
1533
1534
1535
1536
1537
1538
1539
1540
1541
1542
1543
1544
1545
1546
1547
1548
1549
1550
1551
1552
1553
1554
1555
1556
1557
1558
1559
1560
1561
1562
1563
1564
1565
1566
1567
1568
1569
1570
1571
1572
1573
1574
1575
1576
1577
1578
1579
1580
1581
1582
1583
1584
1585
1586
1587
1588
1589
1590
1591
1592
1593
1594
1595
1596
1597
1598
1599
1600
1601
1602
1603
1604
1605
1606
1607
1608
1609
1610
1611
1612
1613
1614
1615
1616
1617
1618
1619
1620
1621
1622
1623
1624
1625
1626
1627
1628
1629
1630
1631
1632
1633
1634
1635
1636
1637
1638
1639
1640
1641
1642
1643
1644
1645
1646
1647
1648
1649
1650
1651
1652
1653
1654
1655
1656
1657
1658
1659
1660
1661
1662
1663
1664
1665
1666
1667
1668
1669
1670
1671
1672
1673
1674
1675
1676
1677
1678
1679
1680
1681
1682
1683
1684
1685
1686
1687
1688
1689
1690
1691
1692
1693
1694
1695
1696
1697
1698
1699
1700
1701
1702
1703
1704
1705
1706
1707
1708
1709
1710
1711
1712
1713
1714
1715
1716
1717
1718
1719
1720
1721
1722
1723
1724
1725
1726
1727
1728
1729
1730
1731
1732
1733
1734
1735
1736
1737
1738
1739
1740
1741
1742
1743
1744
1745
1746
1747
1748
1749
1750
1751
1752
1753
1754
1755
1756
1757
1758
1759
1760
1761
1762
1763
1764
1765
1766
1767
1768
1769
1770
1771
1772
1773
1774
1775
1776
1777
1778
1779
1780
1781
1782
1783
1784
1785
1786
1787
1788
1789
1790
1791
1792
1793
1794
1795
1796
1797
1798
1799
1800
1801
1802
1803
1804
1805
1806
1807
1808
1809
1810
1811
1812
1813
1814
1815
1816
1817
1818
1819
1820
1821
1822
1823
1824
1825
1826
1827
1828
1829
1830
1831
1832
1833
1834
1835
1836
1837
1838
1839
1840
1841
1842
1843
1844
1845
1846
1847
1848
1849
1850
1851
1852
1853
1854
1855
1856
1857
1858
1859
1860
1861
1862
1863
1864
1865
1866
1867
1868
1869
1870
1871
1872
1873
1874
1875
1876
1877
1878
1879
1880
1881
1882
1883
1884
1885
1886
1887
1888
1889
1890
1891
1892
1893
1894
1895
1896
1897
1898
1899
1900
1901
1902
1903
1904
1905
1906
1907
1908
1909
1910
1911
1912
1913
1914
1915
1916
1917
1918
1919
1920
1921
1922
1923
1924
1925
1926
1927
1928
1929
1930
1931
1932
1933
1934
1935
1936
1937
1938
1939
1940
1941
1942
1943
1944
1945
1946
1947
1948
1949
1950
1951
1952
1953
1954
1955
1956
1957
1958
1959
1960
1961
1962
1963
1964
1965
1966
1967
1968
1969
1970
1971
1972
1973
1974
1975
1976
1977
1978
1979
1980
1981
1982
1983
1984
1985
1986
1987
1988
1989
1990
1991
1992
1993
1994
1995
1996
1997
1998
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
2027
2028
2029
2030
2031
2032
2033
2034
2035
2036
2037
2038
2039
2040
2041
2042
2043
2044
2045
2046
2047
2048
2049
2050
2051
2052
2053
2054
2055
2056
2057
2058
2059
2060
2061
2062
2063
<!-- EUG Chapter Three -->
<!-- $Id$ -->

<chapter id="ChapterUsing">
  <title>User Interface</title>
  <section id="ChUseIntroductionSection"><title>Introduction</title>
    <para>
      By now you have installed <application>Ethereal</application> and 
      are most likely keen to get started capturing your first packets.  In 
      the next chapters we will explore:
      <itemizedlist>
	<listitem>
	  <para>
	    How the Ethereal user interface works
	  </para>
	</listitem>
	<listitem>
	  <para>
	    How to capture packets in <application>Ethereal</application>
	  </para>
	</listitem>
	<listitem>
	  <para>
	    How to view packets in <application>Ethereal</application>
	  </para>
	</listitem>
	<listitem>
	  <para>
	    How to filter packets in <application>Ethereal</application>
	  </para>
	</listitem>
	<listitem>
	  <para>
	    ... and many other things!
	  </para>
	</listitem>
      </itemizedlist>
    </para>
  </section>
  
  <section id="ChUseStartSection"><title>Start Ethereal</title>
    <para>
	You can start Ethereal from your shell or window manager.
	<tip><title>Tip!</title>
	<para>
	When starting Ethereal it's possible to specify optional settings using 
	the	command line. See <xref linkend="ChCustCommandLine"/> for details.
	</para>
	</tip>
	<note><title>Note!</title>
	<para>
	In the following chapters, a lot of screenshots from Ethereal will be shown. 
	As Ethereal runs on many different platforms and there are different 
	versions of the underlying GUI toolkit (GTK 1.x / 2.x) used, your 
	screen might look different from the provided screenshots. But as there 
	are no real differences in functionality, these screenshots should still 
	be well understandable.
	</para>
	</note>
	</para>
  </section>
  
  <section id="ChUseMainWindowSection"><title>The Main window</title>
	<para>
      Lets look at Ethereal's user interface. <xref linkend="ChUseFig01"/> shows 
	Ethereal as you would usually see it after some packets captured or loaded 
	(how to do this will be described later).
	<figure id="ChUseFig01">
	  <title>The Main window</title>
	  <graphic scale="100" entityref="EtherealThreePane1" format="PNG"/>
	</figure>
    </para>
    <para>
      Ethereal's main window consist of parts that are commonly known from many 
	  other GUI programs.
      <orderedlist>
	<listitem>
	  <para>
	    The <emphasis>menu</emphasis> (see <xref linkend="ChUseMenuSection"/>)
		is used to start actions.
	  </para>
	</listitem>
	<listitem>
	  <para>
	    The <emphasis>main toolbar</emphasis> (see <xref linkend="ChUseMainToolbarSection"/>) 
		provides quick access to frequently used items from the menu.
	  </para>
	</listitem>
	<listitem>
	  <para>
	    The <emphasis>filter toolbar</emphasis> (see <xref linkend="ChUseFilterToolbarSection"/>) 
		provides a way to directly manipulate the currently used display filter 
		(see <xref linkend="ChWorkDisplayFilterSection"/>). 
	  </para>
	</listitem>
	<listitem>
	  <para>
	    The <emphasis>packet list pane</emphasis> (see <xref linkend="ChUsePacketListPaneSection"/>) 
		displays a summary of each packet captured.  By clicking on packets 
		in this pane you control what is displayed in the other two panes.
	  </para>
	</listitem>
	<listitem>
	  <para>
	    The <emphasis>packet details pane</emphasis> (see <xref linkend="ChUsePacketDetailsPaneSection"/>) 
		displays the packet selected in the packet list pane in more detail.
	  </para>
	</listitem>
	<listitem>
	  <para>
	    The <emphasis>packet bytes pane</emphasis> (see <xref linkend="ChUsePacketBytesPaneSection"/>) 
		displays the data from the packet selected in the packet list pane, and 
		highlights the field selected in the packet details pane.
	  </para>
	</listitem>
	<listitem>
	  <para>
	    The <emphasis>statusbar</emphasis> (see <xref linkend="ChUseStatusbarSection"/>) 
		shows some detailed information about the current program state and 
		the captured data.
	  </para>
	</listitem>
      </orderedlist>
	  <tip><title>Tip!</title>
	  <para>
	  The layout of the main window can be customized by changing preference settings. 
	  See <xref linkend="ChCustPreferencesSection"/> for details!
	  </para>
	  </tip>
    </para>
	</section>
	
  <section id="ChUseMenuSection"><title>The Menu</title>
    <para>
      The Ethereal menu sits on top of the Ethereal window. 
      An example is shown in <xref linkend="ChUseEtherealMenu"/>.
    </para>
	<note><title>Note!</title>
	<para>
	Menu items will be greyed out if the corresponding feature isn't 
	available. For example, you cannot save a capture file if you didn't 
	capture or load any data before.
	</para>
	</note>
    <para>
	<figure id="ChUseEtherealMenu"><title>The Menu</title>
	  <graphic entityref="EtherealMenuOnly" format="PNG"/>
	</figure>
    </para>
    <para>
      It contains the following items:
      <variablelist>
	<varlistentry><term><command>File</command></term>
	  <listitem>
	    <para>
	      This menu contains items to open and merge capture files, 
		  save / print / export capture files in whole or in part, 
		  and to quit from Ethereal. See <xref linkend="ChUseFileMenuSection"/>.
	    </para>
	  </listitem>
	</varlistentry>
	<varlistentry><term><command>Edit</command></term>
	  <listitem>
	    <para>
	      This menu contains items to find a packet, time reference or mark one 
		  or more packets, set your preferences, 
	      (cut, copy, and paste are not presently implemented).
		  See <xref linkend="ChUseEditMenuSection"/>.
	    </para>
	  </listitem>
	</varlistentry>
	<varlistentry><term><command>View</command></term>
	  <listitem>
	    <para>This menu controls the display of the captured data, 
		including the colorization of packets, zooming the font, 
		show a packet in a separate window, expand and collapse trees in packet details, ....
		See <xref linkend="ChUseViewMenuSection"/>.
		</para>
	  </listitem>
	</varlistentry>
	<varlistentry><term><command>Go</command></term>
	  <listitem>
	    <para>This menu contains items to go to a specific packet.
		See <xref linkend="ChUseGoMenuSection"/>.
		</para>
	  </listitem>
	</varlistentry>
	<varlistentry><term><command>Capture</command></term>
	  <listitem>
	    <para>This menu allows you to start and stop captures and to edit capture filters.
		See <xref linkend="ChUseCaptureMenuSection"/>.
		</para>
	  </listitem>
	</varlistentry>
	<varlistentry><term><command>Analyze</command></term>
	  <listitem>
	    <para>
		  This menu contains items to manipulate display filters, enable or 
		  disable the dissection of protocols, configure user specified decodes
		  and follow a TCP stream.
		  See <xref linkend="ChUseAnalyzeMenuSection"/>.
	    </para>
	  </listitem>
	</varlistentry>
	<varlistentry><term><command>Statistics</command></term>
	  <listitem>
	    <para>
	      This menu contains menu-items to display various statistic windows,
		  including a summary of the packets that have been captured, 
		  display protocol hierarchy statistics and much more.
		  See <xref linkend="ChUseStatisticsMenuSection"/>.
	    </para>
	  </listitem>
	</varlistentry>
	<varlistentry><term><command>Help</command></term>
	  <listitem>
	    <para>
	      This menu contains items to help the user, like access to some basic 
		  help, a list of the supported protocols, manual pages, online access
		  to some of the webpages, and the usual about dialog.
		  See <xref linkend="ChUseHelpMenuSection"/>.
	    </para>
	  </listitem>
	  </varlistentry>
	</variablelist>
      Each of these menu items is described in more detail in the sections 
	  that follow. 
    </para>
	<tip><title>Tip!</title>
	<para>
	You can access menu items directly or by pressing the corresponding 
	accelerator keys, which are shown at the right side of the 
	menu. For example, you can press the Control (or Strg in German) and the K 
	keys together to open the capture dialog. 
	</para>
	</tip>
  </section>

  <section id="ChUseFileMenuSection"><title>The "File" menu</title>
    <para>
      The Ethereal file menu contains the fields shown in 
      <xref linkend="ChUseTabFile"/>.
    </para>
    <figure id="ChUseEtherealFileMenu">
      <title>The "File" Menu</title>
      <graphic entityref="EtherealFileMenu" format="PNG"/>
    </figure>
    <table id="ChUseTabFile" frame="none"><title>File menu items</title>
      <tgroup cols="3">
	<colspec colnum="1" colwidth="72pt"/>
	  <colspec colnum="2" colwidth="80pt"/>
	    <thead>
	      <row>
		<entry>Menu Item</entry>
		<entry>Accelerator</entry>
		<entry>Description</entry>
	      </row>
	    </thead>
	    <tbody>
	      <row>
		<entry><command>Open...</command></entry>
		<entry>Ctrl+O</entry>
		<entry><para>
		    This menu item brings up the file open dialog box that 
		    allows you to load a capture file for viewing. It is 
		    discussed in more detail in <xref linkend="ChIOOpen"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Open Recent</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item shows a submenu containing the recently opened 
			capture files. Clicking on one of the submenu items will open the 
			corresponding capture file directly.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Merge...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item brings up the merge file dialog box that 
		    allows you to merge a capture file into the currently loaded one. 
			It is discussed in more detail in <xref linkend="ChIOMergeSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Close</command></entry>
		<entry>Ctrl+W</entry>
		<entry><para>
		    This menu item closes the current capture. If you 
		    haven't saved the capture, you will be asked to do so first
			 (this can be disabled by a preference setting).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Save</command></entry>
		<entry>Ctrl+S</entry>
		<entry><para>
		    This menu item saves the current capture. If you 
		    have not set a default capture file name (perhaps with 
		    the -w &lt;capfile&gt; option), Ethereal pops up the 
		    Save Capture File As dialog box (which is discussed 
		    further in <xref linkend="ChIOSaveAs"/>).
		  </para><note>
		    <title>Note!</title>
		    <para>
		      If you have already saved the current capture, this 
		      menu item will be greyed out.
		    </para>
		  </note><note>
		    <title>Note!</title>
		    <para>
		      You cannot save a live capture while it is in 
		      progress.  You must stop the capture in order to 
		      save.
		    </para>
		  </note></entry>
	      </row>
	      <row>
		<entry><command>Save As...</command></entry>
		<entry>Shift+Ctrl+S</entry>
		<entry><para>
		    This menu item allows you to save the current capture 
		    file to whatever file you would like. It pops up the 
		    Save Capture File As dialog box (which is discussed 
		    further in <xref linkend="ChIOSaveAs"/>).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>File Set > List Files</command></entry>
		<entry></entry>
		<entry><para>
			This menu item allows you to show a list of files in a file set. 
			It pops up the Ethereal List File Set dialog box (which is 
			discussed further in <xref linkend="ChIOFileSetSection"/>).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>File Set > Next File</command></entry>
		<entry></entry>
		<entry><para>
			If the currently loaded file is part of a file set, jump to the 
			next file in the set. If it isn't part of a file set or just the 
			last file in that set, this item is greyed out.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>File Set > Previous File</command></entry>
		<entry></entry>
		<entry><para>
			If the currently loaded file is part of a file set, jump to the 
			previous file in the set. If it isn't part of a file set or just 
			the first file in that set, this item is greyed out.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Export > as "Plain Text" file...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item allows you to export all, or some, of the packets in 
		    the capture file to a plain ASCII text file. 
			It pops up the Ethereal Export dialog box (which is discussed further in 
		    <xref linkend="ChIOExportPlainDialog"/>).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Export > as "PostScript" file...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item allows you to export the (or some) of the packets in 
		    the capture file to a PostScript file. 
			It pops up the Ethereal Export dialog box (which is discussed further in 
		    <xref linkend="ChIOExportPSDialog"/>).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Export > as "CSV" (Comma Separated Values packet summary) file...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item allows you to export the (or some) of the packet summaries in 
		    the capture file to a .csv file (e.g. used by spreadsheet programs). 
			It pops up the Ethereal Export dialog box (which is discussed further in 
		    <xref linkend="ChIOExportCSVDialog"/>).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Export > as "PSML" file...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item allows you to export the (or some) of the packets in 
		    the capture file to a PSML (packet summary markup language) XML file. 
			It pops up the Ethereal Export dialog box (which is discussed further in 
		    <xref linkend="ChIOExportPSMLDialog"/>).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Export > as "PDML" file...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item allows you to export the (or some) of the packets in 
		    the capture file to a PDML (packet details markup language) XML file. 
			It pops up the Ethereal Export dialog box (which is discussed further in 
		    <xref linkend="ChIOExportPDMLDialog"/>).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Export > Selected Packet Bytes...</command></entry>
		<entry>Ctrl+H</entry>
		<entry><para>
		    This menu item allows you to export the currently selected bytes 
			in the packet bytes pane to a binary file. It pops up the 
			Ethereal Export dialog box (which is discussed further in 
		    <xref linkend="ChIOExportSelectedDialog"/>)
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Print...</command></entry>
		<entry>Ctrl+P</entry>
		<entry><para>
		    This menu item allows you to print all (or some of) the packets in 
		    the capture file. It pops up the Ethereal Print dialog 
		    box (which is discussed further in 
		    <xref linkend="ChIOPrintSection"/>).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Quit</command></entry>
		<entry>Ctrl+Q</entry>
		<entry><para>
		    This menu item allows you to quit from Ethereal.  
			Ethereal will ask to save your capture file if you haven't saved 
			it before (this can be disabled by a preference setting). 
		  </para></entry>
	      </row>
	    </tbody>
      </tgroup>
    </table>
  </section>
  
  <section id="ChUseEditMenuSection"><title>The "Edit" menu</title>
    <para>
      The Ethereal Edit menu contains the fields shown in 
      <xref linkend="ChUseTabEdit"/>.
    </para>
    <figure id="ChUseEtherealEditMenu">
      <title>The "Edit" Menu</title>
      <graphic entityref="EtherealEditMenu" format="PNG"/>
    </figure>
    <table id="ChUseTabEdit" frame="none">
      <title>Edit menu items</title>
      <tgroup cols="3">
	<colspec colnum="1" colwidth="72pt"/>
	  <colspec colnum="2" colwidth="80pt"/>
	    <thead>
	      <row>
		<entry>Menu Item</entry>
		<entry>Accelerator</entry>
		<entry>Description</entry>
	      </row>
	    </thead>
	    <tbody>
	      <row>
		<entry><command>Find Packet...</command></entry>
		<entry>Ctrl+F</entry>
		<entry><para>
		    This menu item brings up a dialog box that allows you 
		    to find a packet by many criteria.
		    There is further information on finding packets in 
		    <xref linkend="ChWorkFindPacketSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Find Next</command></entry>
		<entry>Ctrl+N</entry>
		<entry><para>
		    This menu item tries to find the next packet matching the 
			settings from "Find Packet...".
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Find Previous</command></entry>
		<entry>Ctrl+B</entry>
		<entry><para>
		    This menu item tries to find the previous packet matching the 
			settings from "Find Packet...".
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Time Reference > Set Time Reference (toggle)</command></entry>
		<entry>Ctrl+T</entry>
		<entry><para>
		    This menu item set a time reference on the currently selected 
			packet. See <xref linkend="ChWorkTimeReferencePacketSection"/> for more information 
		      about the time referenced packets.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Time Reference > Find Next</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item tries to find the next time referenced packet.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Time Reference > Find Previous</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item tries to find the previous time referenced packet.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Mark Packet (toggle)</command></entry>
		<entry>Ctrl+M</entry>
		<entry><para>
		    This menu item "marks" the currently selected packet. See
			<xref linkend="ChWorkMarkPacketSection"/> for details.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Mark All Packets</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item "marks" all packets.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Unmark All Packets</command></entry>
		<entry></entry>
		<entry><para>This menu item "unmarks" all marked packets.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Preferences...</command></entry>
		<entry>Shift+Ctrl+P</entry>
		<entry><para>
		    This menu item brings up a dialog box that allows 
		    you to set preferences for many parameters that control 
		    Ethereal.  You can also save your preferences so Ethereal 
		    will use them the next time you start it. More detail 
		    is provided in <xref linkend="ChCustPreferencesSection"/>.
		  </para></entry>
	      </row>
	    </tbody>
      </tgroup>
    </table>
  </section>

  <section id="ChUseViewMenuSection"><title>The "View" menu</title>
    <para>
      The Ethereal View menu contains the fields shown in 
      <xref linkend="ChUseTabView"/>.
    </para>
    <figure id="ChUseEtherealViewMenu">
      <title>The "View" Menu</title>
      <graphic entityref="EtherealViewMenu" format="PNG"/>
    </figure>
    <table id="ChUseTabView" frame="none">
      <title>View menu items</title>
      <tgroup cols="3">
	<colspec colnum="1" colwidth="72pt"/>
	  <colspec colnum="2" colwidth="80pt"/>
	    <thead>
	      <row>
		<entry>Menu Item</entry>
		<entry>Accelerator</entry>
		<entry>Description</entry>
	      </row>
	    </thead>
	    <tbody>
	      <row>
		<entry><command>Main Toolbar</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item hides or shows the main toolbar, see 
		  <xref linkend="ChUseMainToolbarSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Filter Toolbar</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item hides or shows the filter toolbar, see 
		  <xref linkend="ChUseFilterToolbarSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Statusbar</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item hides or shows the statusbar, see 
		  <xref linkend="ChUseStatusbarSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Packet List</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item hides or shows the packet list pane, see 
		  <xref linkend="ChUsePacketListPaneSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Packet Details</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item hides or shows the packet details pane, see 
		  <xref linkend="ChUsePacketDetailsPaneSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Packet Bytes</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item hides or shows the packet bytes pane, see 
		  <xref linkend="ChUsePacketBytesPaneSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Time Display Format > Date and Time of Day:  1970-01-01 01:02:03.123456</command></entry>
		<entry></entry>
		<entry><para>
	      Selecting this tells Ethereal to display the 
	      time stamps in date and time of day format, see 
		  <xref linkend="ChWorkTimeFormatsSection"/>.
		  <note><title>Note!</title>
		  <para>
		  The fields "Time of Day", "Date and Time of 
	      Day", "Seconds Since Beginning of Capture" and "Seconds Since 
	      Previous Packet" are mutually exclusive.
		  </para>
		  </note>
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Time Display Format > Time of Day:  01:02:03.123456</command></entry>
		<entry></entry>
		<entry><para>
	      Selecting this tells Ethereal to display time 
	      stamps in time of day format, see 
		  <xref linkend="ChWorkTimeFormatsSection"/>. 
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Time Display Format > Seconds Since Beginning of Capture:  123.123456</command></entry>
		<entry></entry>
		<entry><para>
	      Selecting this tells Ethereal to display time 
	      stamps in seconds since beginning of capture format, see 
		  <xref linkend="ChWorkTimeFormatsSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Time Display Format > Seconds Since Previous Packet:  1.123456</command></entry>
		<entry></entry>
		<entry><para>
	      Selecting this tells Ethereal to display time stamps in 
	      seconds since previous packet format, see 
		  <xref linkend="ChWorkTimeFormatsSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Time Display Format > ------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Time Display Format > Automatic (File Format Precision)</command></entry>
		<entry></entry>
		<entry><para>
	      Selecting this tells Ethereal to display time stamps with the 
		  precision given by the capture file format used, see 
		  <xref linkend="ChWorkTimeFormatsSection"/>.
		  <note><title>Note!</title>
		  <para>
		  The fields "Automatic", "Seconds" and "...seconds" are mutually exclusive.
		  </para>
		  </note>
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Time Display Format > Seconds:  0</command></entry>
		<entry></entry>
		<entry><para>
	      Selecting this tells Ethereal to display time stamps with a precision of one second, see 
		  <xref linkend="ChWorkTimeFormatsSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Time Display Format > ...seconds:  0....</command></entry>
		<entry></entry>
		<entry><para>
	      Selecting this tells Ethereal to display time stamps with a precision of one second, decisecond, centisecond, millisecond, microsecond or nanosecond, see 
		  <xref linkend="ChWorkTimeFormatsSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Name Resolution > Resolve Name</command></entry>
		<entry></entry>
		<entry><para>
		This item allows you to trigger a name resolve of the current packet 
		only, see <xref linkend="ChAdvNameResolutionSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Name Resolution > Enable for MAC Layer</command></entry>
		<entry></entry>
		<entry><para>
		This item allows you to control whether or not 
		Ethereal translates MAC addresses into names, see
		  <xref linkend="ChAdvNameResolutionSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Name Resolution > Enable for Network Layer</command></entry>
		<entry></entry>
		<entry><para>
		This item allows you to control whether or not 
		Ethereal translates network addresses into names, see
		  <xref linkend="ChAdvNameResolutionSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Name Resolution > Enable for Transport Layer</command></entry>
		<entry></entry>
		<entry><para>
		This item allows you to control whether or not 
		Ethereal translates transport addresses into names, see
		  <xref linkend="ChAdvNameResolutionSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Colorize Packet List</command></entry>
		<entry></entry>
		<entry><para>
		This item allows you to control wether or not Ethereal should colorize 
		the packet list.</para>
		<note><title>Note!</title><para>
		Enabling colorization will slow down the display 
		of new packets while capturing / loading capture files.
		  </para></note></entry>
	      </row>
	      <row>
		<entry><command>Auto Scroll in Live Capture</command></entry>
		<entry></entry>
		<entry><para>
		This item allows you to specify that Ethereal 
		should scroll the packet list pane as new packets come 
		in, so you are always looking at the last packet.  If you 
		do not specify this, Ethereal simply adds new packets onto 
		the end of the list, but does not scroll the packet list 
		pane.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Zoom In</command></entry>
		<entry>Ctrl++</entry>
		<entry><para>
		  Zoom into the packet data (increase the font size).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Zoom Out</command></entry>
		<entry>Ctrl+-</entry>
		<entry><para>
		  Zoom out of the packet data (decrease the font size).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Normal Size</command></entry>
		<entry>Ctrl+=</entry>
		<entry><para>
		  Set zoom level back to 100% (set font size back to normal).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Resize All Columns</command></entry>
		<entry></entry>
		<entry><para>
		  Resize all column widths so the content will fit into it.
		  </para>
		  <note><title>Note!</title><para>
		  Resizing may take a significant amount of time, especially if a 
		  large capture file is loaded.
		  </para></note>
		  </entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Expand Subtrees</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item expands the currently selected subtree in the 
			packet details tree. 
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Expand All</command></entry>
		<entry></entry>
		<entry><para>
		    Ethereal keeps a list of all the protocol subtrees 
		    that are expanded, and uses it to ensure that the 
		    correct subtrees are expanded when you display a packet. 
		    This menu item expands all subtrees in all packets in 
		    the capture. 
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Collapse All</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item collapses the tree view of all packets 
		    in the capture list.  
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Coloring Rules...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item brings up a dialog box that allows you 
		    to color packets in the packet list pane according to 
		    filter expressions you choose. It can be very useful 
		    for spotting certain types of packets, see
		  <xref linkend="ChCustColorizationSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Show Packet in New Window</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item brings up the selected packet in a 
		    separate window. The separate window shows only the 
		    tree view and byte view panes. 
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Reload</command></entry>
		<entry>Ctrl-R</entry>
		<entry><para>
		    This menu item allows you to reload the current 
		    capture file.
		  </para></entry>
	      </row>
	    </tbody>
      </tgroup>
    </table>
  </section>

  <section id="ChUseGoMenuSection"><title>The "Go" menu</title>
    <para>
      The Ethereal Go menu contains the fields shown in 
      <xref linkend="ChUseTabGo"/>.
    </para>
    <figure id="ChUseEtherealGoMenu">
      <title>The "Go" Menu</title>
      <graphic entityref="EtherealGoMenu" format="PNG"/>
    </figure>
    <table id="ChUseTabGo" frame="none">
      <title>Go menu items</title>
      <tgroup cols="3">
	<colspec colnum="1" colwidth="72pt"/>
	  <colspec colnum="2" colwidth="80pt"/>
	    <thead>
	      <row>
		<entry>Menu Item</entry>
		<entry>Accelerator</entry>
		<entry>Description</entry>
	      </row>
	    </thead>
	    <tbody>
	      <row>
		<entry><command>Back</command></entry>
		<entry>Alt+Left</entry>
		<entry><para>
		    Jump to the recently visited packet in the packet 
			history, much like the page history in a web browser.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Forward</command></entry>
		<entry>Alt+Right</entry>
		<entry><para>
		    Jump to the next visited packet in the packet 
			history, much like the page history in a web browser.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Go to Packet...</command></entry>
		<entry>Ctrl-G</entry>
		<entry><para>
		    Bring up a dialog box that allows you 
		    to specify a packet number, and then goes to that packet. See
			<xref linkend="ChWorkGoToPacketSection"/> for details.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Go to Corresponding Packet</command></entry>
		<entry></entry>
		<entry><para>
		    Go to the corresponding packet of the currently 
			selected protocol field. If the selected field doesn't correspond 
			to a packet, this item is greyed out.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>First Packet</command></entry>
		<entry></entry>
		<entry><para>
		    Jump to the first packet of the capture file.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Last Packet</command></entry>
		<entry></entry>
		<entry><para>
		    Jump to the last packet of the capture file.
		  </para></entry>
	      </row>
	    </tbody>
      </tgroup>
    </table>
  </section>

  <section id="ChUseCaptureMenuSection"><title>The "Capture" menu</title>
    <para>
      The Ethereal Capture menu contains the fields shown in 
      <xref linkend="ChUseTabCap"/>.
    </para>
    <figure id="ChUseEtherealCaptureMenu">
      <title>The "Capture" Menu</title>
      <graphic entityref="EtherealCaptureMenu" format="PNG"/>
    </figure>
    <table id="ChUseTabCap" frame="none">
      <title>Capture menu items</title>
      <tgroup cols="3">
	<colspec colnum="1" colwidth="72pt"/>
	  <colspec colnum="2" colwidth="80pt"/>
	    <thead>
	      <row>
		<entry>Menu Item</entry>
		<entry>Accelerator</entry>
		<entry>Description</entry>
	      </row>
	    </thead>
	    <tbody>
	      <row>
		<entry><command>Interfaces...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item brings up a dialog box that shows what's going on 
			at the network interfaces Ethereal knows of, see
			<xref linkend="ChCapInterfaceSection"/>) .
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Options...</command></entry>
		<entry>Ctrl+K</entry>
		<entry><para>
		    This menu item brings up the Capture Options 
		    dialog box (discussed further in 
		    <xref linkend="ChCapCaptureOptions"/>) and allows you to 
		      start capturing packets.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Start</command></entry>
		<entry></entry>
		<entry><para>
		    Immediately start capturing packets with the same settings than 
			the last time.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Stop</command></entry>
		<entry>Ctrl+E</entry>
		<entry><para>
		    This menu item stops the currently running capture, see
			<xref linkend="ChCapStopSection"/>) .
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Restart</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item stops the currently running capture and starts 
			again with the same options, this is just for convenience.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Capture Filters...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item brings up a dialog box that allows you to 
		    create and edit capture filters. You can name filters, 
		    and you can save them for future use. More detail on 
		    this subject is provided in 
		    <xref linkend="ChWorkDefineFilterSection"/>
		  </para></entry>
	      </row>
	    </tbody>
      </tgroup>
    </table>
  </section>
  
  <section id="ChUseAnalyzeMenuSection"><title>The "Analyze" menu</title>
    <para>
      The Ethereal Analyze menu contains the fields shown in 
      <xref linkend="ChUseAnalyze"/>.
    </para>
    <figure id="ChUseEtherealAnalyzeMenu">
      <title>The "Analyze" Menu</title>
      <graphic entityref="EtherealAnalyzeMenu" format="PNG"/>
    </figure>
    <table id="ChUseAnalyze" frame="none"><title>Analyze menu items</title>
      <tgroup cols="3">
	<colspec colnum="1" colwidth="72pt"/>
	  <colspec colnum="2" colwidth="80pt"/>
	    <thead>
	      <row>
		<entry>Menu Item</entry>
		<entry>Accelerator</entry>
		<entry>Description</entry>
	      </row>
	    </thead>
	    <tbody>
	      <row>
		<entry><command>Display Filters...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item brings up a dialog box that allows you 
		    to create and edit display filters. You can name 
		    filters, and you can save them for future use. More 
		    detail on this subject is provided in 
		    <xref linkend="ChWorkDefineFilterSection"/>
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Apply as Filter > ...</command></entry>
		<entry></entry>
		<entry><para>
			These menu items will change the current display filter and apply 
			the changed filter immediately. Depending on the chosen menu item,
			the current display filter string will be replaced or appended to 
			by the selected protocol field in the packet details pane.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Prepare a Filter > ...</command></entry>
		<entry></entry>
		<entry><para>
			These menu items will change the current display filter but won't 
			apply the changed filter. Depending on the chosen menu item,
			the current display filter string will be replaced or appended to
			by the selected protocol field in the packet details pane.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
  	      <row>
		<entry><command>Enabled Protocols...</command></entry>
		<entry>Shift+Ctrl+R</entry>
		<entry><para>
			This menu item allows the user to enable/disable protocol 
			dissectors, see <xref linkend="ChAdvEnabledProtocols"/>
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Decode As...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item allows the user to force Ethereal to 
		    decode certain packets as a particular protocol, see 
			<xref linkend="ChAdvDecodeAs"/>
		  </para></entry>
	      </row>
	      <row>
		<entry><command>User Specified Decodes...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item allows the user to force Ethereal to 
		    decode certain packets as a particular protocol, see 
			<xref linkend="ChAdvDecodeAsShow"/>
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Follow TCP Stream</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item brings up a separate window and displays 
		    all the TCP segments captured that are on the same TCP 
		    connection as a selected packet, see
		    <xref linkend="ChAdvFollowTCPSection"/>
		  </para></entry>
	      </row>
	    </tbody>
      </tgroup>
    </table>
  </section>

  <section id="ChUseStatisticsMenuSection"><title>The "Statistics" menu</title>
    <para>
      The Ethereal Statistics menu contains the fields shown in 
      <xref linkend="ChUseStatistics"/>.
    </para>
    <figure id="ChUseEtherealStatisticsMenu">
      <title>The "Statistics" Menu</title>
      <graphic entityref="EtherealStatisticsMenu" format="PNG"/>
    </figure>
    <para>
	All menu items will bring up a new window showing specific statistical 
	information.
    </para>
    <table id="ChUseStatistics" frame="none">
      <title>Statistics menu items</title>
      <tgroup cols="3">
	<colspec colnum="1" colwidth="72pt"/>
	  <colspec colnum="2" colwidth="80pt"/>
	    <thead>
	      <row>
		<entry>Menu Item</entry>
		<entry>Accelerator</entry>
		<entry>Description</entry>
	      </row>
	    </thead>
	    <tbody>
	      <row>
		<entry><command>Summary</command></entry>
		<entry></entry>
		<entry><para>
		    Show information about the data captured, see <xref 
			linkend="ChStatSummary"/>. 
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Protocol Hierarchy</command></entry>
		<entry></entry>
		<entry><para>
		    Display a hierarchical tree of protocol statistics, see <xref 
			linkend="ChStatHierarchy"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Conversations</command></entry>
		<entry></entry>
		<entry><para>
		    Display a list of conversations (traffic between two endpoints), 
			see <xref linkend="ChStatConversationsWindow"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Endpoints</command></entry>
		<entry></entry>
		<entry><para>
		    Display a list of endpoints (traffic to/from an address), see 
			<xref linkend="ChStatEndpointsWindow"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>IO Graphs</command></entry>
		<entry></entry>
		<entry><para>
		    Display user specified graphs (e.g. the number of packets in the 
			course of time), see <xref linkend="ChStatIOGraphs"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>Conversation List</command></entry>
		<entry></entry>
		<entry><para>
		    Display a list of conversations, obsoleted by the combined window 
			of Conversations above, see 
			<xref linkend="ChStatConversationListWindow"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Endpoint List</command></entry>
		<entry></entry>
		<entry><para>
		    Display a list of endpoints, obsoleted by the combined window 
			of Endpoints above, see 
			<xref linkend="ChStatEndpointListWindow"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Service Response Time</command></entry>
		<entry></entry>
		<entry><para>
			Display the time between a request and the corresponding response, see 
			<xref linkend="ChStatSRT"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>ANSI</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>GSM</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>H.225...</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>ISUP Message Types</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>MTP3</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>RTP</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>SCTP</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>SIP</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>VoIP Calls...</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>WAP-WSP...</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>BOOTP-DHCP</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>HTTP</command></entry>
		<entry></entry>
		<entry><para>HTTP request/response statistics, see <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>ISUP Messages</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>ONC-RPC Programs</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	      <row>
		<entry><command>TCP Stream Graph</command></entry>
		<entry></entry>
		<entry><para>See <xref linkend="ChStatXXX"/></para></entry>
	      </row>
	    </tbody>
      </tgroup>
    </table>
  </section>
  
  <section id="ChUseHelpMenuSection"><title>The "Help" menu</title>
    <para>
      The Ethereal Help menu contains the fields shown in 
      <xref linkend="ChUseHelp"/>.
    </para>
    <figure id="ChUseEtherealHelpMenu">
      <title>The "Help" Menu</title>
      <graphic entityref="EtherealHelpMenu" format="PNG"/>
    </figure>
    <table id="ChUseHelp" frame="none">
      <title>Help menu items</title>
      <tgroup cols="3">
	<colspec colnum="1" colwidth="72pt"/>
	  <colspec colnum="2" colwidth="80pt"/>
	    <thead>
	      <row>
		<entry>Menu Item</entry>
		<entry>Accelerator</entry>
		<entry>Description</entry>
	      </row>
	    </thead>
	    <tbody>
	      <row>
		<entry><command>Contents</command></entry>
		<entry>F1</entry>
		<entry><para>
		    This menu item brings up a basic help system.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Supported Protocols</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item brings up a dialog box showing the supported 
			protocols and protocol fields.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Manual Pages > ...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item starts a Web browser showing one of the locally 
			installed html manual pages.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>Ethereal Online > ...</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item starts a Web browser showing the chosen 
			webpage from: 
			<ulink url="&EtherealWebSite;">&EtherealWebSite;</ulink>.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><command>About Ethereal</command></entry>
		<entry></entry>
		<entry><para>
		    This menu item brings up an information window that 
		    provides some information on Ethereal, such as the plugins, the 
			used folders, ...
		  </para></entry>
	      </row>
	    </tbody>
      </tgroup>
    </table>
	<note><title>Note!</title>
	<para>
	Calling a Web browser might be unsupported in your version of Ethereal.
	If this is the case, the corresponding menu items will be hidden.
	</para>
	</note>
	<note><title>Note!</title>
	<para>
	If calling a Web browser fails on your machine, maybe because just nothing 
	happens or the browser is started but no page is shown, have a look at the 
	webbrowser setting in the preferences dialog.
	</para>
	</note>
  </section> 

  <section id="ChUseMainToolbarSection"><title>The "Main" toolbar</title>
    <para>
      The main toolbar provides quick access to frequently used items from the 
	  menu. This toolbar cannot be customized by the user, but it can be hidden
	  using the View menu, if the space on the screen is needed to show even 
	  more packet data.
    </para>
    <para>
	As in the menu, only the items useful in the current program state will 
	be available. The others will be greyed out (e.g. you cannot save a capture
	file if you haven't loaded one).
    <figure id="ChUseEtherealMainToolbar">
      <title>The "Main" toolbar</title>
      <graphic entityref="EtherealMainToolbar" format="PNG"/>
    </figure>
    </para>
    <table id="ChUseMainToolbar" frame="none">
      <title>Main toolbar items</title>
      <tgroup cols="4">
	<colspec colnum="1" colwidth="40pt"/>
	  <colspec colnum="2" colwidth="80pt"/>
	  <colspec colnum="3" colwidth="80pt"/>
	    <thead>
	      <row>
		<entry>Toolbar Icon</entry>
		<entry>Toolbar Item</entry>
		<entry>Corresponding Menu Item</entry>
		<entry>Description</entry>
	      </row>
	    </thead>
	    <tbody>
	      <row>
		<entry><graphic entityref="EtherealToolbarCaptureInterfaces" format="PNG"/></entry>
		<entry><command>Interfaces...</command></entry>
		<entry>Capture/Interfaces...</entry>
		<entry><para>
		    This item brings up the Capture Interfaces List 
		    dialog box (discussed further in 
		    <xref linkend="ChCapCapturingSection"/>).
		  </para>
		  </entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarCaptureOptions" format="PNG"/></entry>
		<entry><command>Options...</command></entry>
		<entry>Capture/Options...</entry>
		<entry><para>
		    This item brings up the Capture Options 
		    dialog box (discussed further in 
		    <xref linkend="ChCapCapturingSection"/>) and allows you to 
		      start capturing packets.
		  </para>
		  </entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarCaptureStart" format="PNG"/></entry>
		<entry><command>Start</command></entry>
		<entry>Capture/Start</entry>
		<entry><para>
		    This item starts capturing packets with the options form 
			the last time.
		  </para>
		  </entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarCaptureStop" format="PNG"/></entry>
		<entry><command>Stop</command></entry>
		<entry>Capture/Stop</entry>
		<entry><para>
		    This item stops the currently running live capture process 
			<xref linkend="ChCapCapturingSection"/>).
		  </para>
		  </entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarCaptureRestart" format="PNG"/></entry>
		<entry><command>Restart</command></entry>
		<entry>Capture/Restart</entry>
		<entry><para>
		    This item stops the currently running live capture process 
			and restarts it again, for convenience.
		  </para>
		  </entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarOpen" format="PNG"/></entry>
		<entry><command>Open...</command></entry>
		<entry>File/Open...</entry>
		<entry><para>
		    This item brings up the file open dialog box that 
		    allows you to load a capture file for viewing. It is 
		    discussed in more detail in <xref linkend="ChIOOpen"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarSaveAs" format="PNG"/></entry>
		<entry><command>Save As...</command></entry>
		<entry>File/Save As...</entry>
		<entry><para>
		    This item allows you to save the current capture file to whatever 
			file you would like. It pops up the Save Capture File As dialog 
			box (which is discussed further in <xref linkend="ChIOSaveAs"/>). 
			</para>
			<note><title>Note!</title>
			<para>
			If you currently have a temporary capture file, the Save icon 
			<inlinegraphic entityref="EtherealToolbarSave" format="PNG"/> will be 
			shown instead.
		  </para></note>
		  </entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarClose" format="PNG"/></entry>
		<entry><command>Close</command></entry>
		<entry>File/Close</entry>
		<entry><para>
		    This item closes the current capture. If you 
		    have not saved the capture, you will be asked to save it first.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarReload" format="PNG"/></entry>
		<entry><command>Reload</command></entry>
		<entry>View/Reload</entry>
		<entry><para>
		    This item allows you to reload the current capture file.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarPrint" format="PNG"/></entry>
		<entry><command>Print...</command></entry>
		<entry>File/Print...</entry>
		<entry><para>
		    This item allows you to print all (or some of) the packets in 
		    the capture file. It pops up the Ethereal Print dialog 
		    box (which is discussed further in 
		    <xref linkend="ChIOPrintSection"/>).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarFind" format="PNG"/></entry>
		<entry><command>Find Packet...</command></entry>
		<entry>Edit/Find Packet...</entry>
		<entry><para>
		    This item brings up a dialog box that allows you 
		    to find a packet. There is further information on finding packets 
			in <xref linkend="ChWorkFindPacketSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarGoBack" format="PNG"/></entry>
		<entry><command>Go Back</command></entry>
		<entry>Go/Go Back</entry>
		<entry><para>
		    This item jumps back in the packet history.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarGoForward" format="PNG"/></entry>
		<entry><command>Go Forward</command></entry>
		<entry>Go/Go Forward</entry>
		<entry><para>
		    This item jumps forward in the packet history.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarGoTo" format="PNG"/></entry>
		<entry><command>Go to Packet...</command></entry>
		<entry>Go/Go to Packet...</entry>
		<entry><para>
		    This item brings up a dialog box that allows you 
		    to specify a packet number to go to that packet.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarGoFirst" format="PNG"/></entry>
		<entry><command>Go To First Packet</command></entry>
		<entry>Go/First Packet</entry>
		<entry><para>
		    This item jumps to the first packet of the capture file.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarGoLast" format="PNG"/></entry>
		<entry><command>Go To Last Packet</command></entry>
		<entry>Go/Last Packet</entry>
		<entry><para>
		    This item jumps to the last packet of the capture file.
		  </para></entry>
	      </row>		  
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarColorize" format="PNG"/></entry>
		<entry><command>Colorize</command></entry>
		<entry>View/Colorize</entry>
		<entry><para>
		  Colorize the packet list (or not).
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarAutoScroll" format="PNG"/></entry>
		<entry><command>Auto Scroll in Live Capture</command></entry>
		<entry>View/Auto Scroll in Live Capture</entry>
		<entry><para>
		  Auto scroll packet list while doing a live capture (or not).
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarZoomIn" format="PNG"/></entry>
		<entry><command>Zoom In</command></entry>
		<entry>View/Zoom In</entry>
		<entry><para>
		  Zoom into the packet data (increase the font size).
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarZoomOut" format="PNG"/></entry>
		<entry><command>Zoom Out</command></entry>
		<entry>View/Zoom Out</entry>
		<entry><para>
		  Zoom out of the packet data (decrease the font size).
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarZoom100" format="PNG"/></entry>
		<entry><command>Normal Size</command></entry>
		<entry>View/Normal Size</entry>
		<entry><para>
		  Set zoom level back to 100%.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarResizeColumns" format="PNG"/></entry>
		<entry><command>Resize Columns</command></entry>
		<entry>View/Resize Columns</entry>
		<entry><para>
		  Resize columns, so the content fits into them.
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarCaptureFilters" format="PNG"/></entry>
		<entry><command>Capture Filters...</command></entry>
		<entry>Capture/Capture Filters...</entry>
		<entry><para>
		    This item brings up a dialog box that allows you to 
		    create and edit capture filters. You can name filters, 
		    and you can save them for future use. More detail on 
		    this subject is provided in 
		    <xref linkend="ChWorkDefineFilterSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarDisplayFilters" format="PNG"/></entry>
		<entry><command>Display Filters...</command></entry>
		<entry>Analyze/Display Filters...</entry>
		<entry><para>
		    This item brings up a dialog box that allows you 
		    to create and edit display filters. You can name 
		    filters, and you can save them for future use. More 
		    detail on this subject is provided in 
		    <xref linkend="ChWorkDefineFilterSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarColoringRules" format="PNG"/></entry>
		<entry><command>Coloring Rules...</command></entry>
		<entry>View/Coloring Rules...</entry>
		<entry><para>
		    This item brings up a dialog box that allows you 
		    color packets in the packet list pane according to 
		    filter expressions you choose. It can be very useful 
		    for spotting certain types of packets. More 
		    detail on this subject is provided in 
		    <xref linkend="ChCustColorizationSection"/>.
		  </para></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarPreferences" format="PNG"/></entry>
		<entry><command>Preferences...</command></entry>
		<entry>Edit/Preferences</entry>
		<entry><para>
		    This item brings up a dialog box that allows 
		    you to set preferences for many parameters that control 
		    Ethereal.  You can also save your preferences so Ethereal 
		    will use them the next time you start it. More detail 
		    is provided in <xref linkend="ChCustPreferencesSection"/>
		  </para></entry>
	      </row>
	      <row>
		<entry><command>------</command></entry>
		<entry></entry>
		<entry></entry>
	      </row>
	      <row>
		<entry><graphic entityref="EtherealToolbarHelp" format="PNG"/></entry>
		<entry><command>Help</command></entry>
		<entry>Help/Contents</entry>
		<entry><para>
		    This item brings up help dialog box.
		  </para></entry>
	      </row>
	    </tbody>
      </tgroup>
    </table>
  </section> 
	  
  <section id="ChUseFilterToolbarSection"><title>The "Filter" toolbar</title>
    <para>
      The filter toolbar lets you quickly edit and apply display filters. More information on 
	    display filters is available in <xref linkend="ChWorkDisplayFilterSection"/>. 
    <figure id="ChUseEtherealFilterToolbar">
      <title>The "Filter" toolbar</title>
      <graphic entityref="EtherealFilterToolbar" format="PNG"/>
    </figure>
      <itemizedlist>
	<listitem>
	  <para>
	    The leftmost button labeled "Filter:" can be clicked to 
	    bring up the filter construction dialog, described in <xref linkend="FiltersDialog"/>.
	  </para>
	</listitem>
	<listitem> 
	  <para>
	    The left middle text box provides an area to enter or edit display
	    filter strings, see <xref linkend="ChWorkBuildDisplayFilterSection"/>
		. A syntax check of your filter string is done while you are typing. 
		The background will turn red if you enter an incomplete or invalid 
		string, and will become green when you enter a valid string. You can 
		click on the pull down arrow to select a previously-entered filter 
		string from a list. The entries in the pull down list will remain 
		available even after a program restart.
	  </para>
	  <note><title>Note!</title>
	  <para>
	  	After you've changed something in this field, don't forget to press 
		the Apply button (or the Enter/Return key), to apply this filter 
		string to the display.
	  </para>
	  </note>
	  <note><title>Note!</title>
	  <para>
		This field is also where the current filter in effect is displayed.
	  </para>
	  </note>
	</listitem>
	<listitem>
	  <para>
	    The middle button labeled "Add Expression..." opens a dialog box that lets
		you edit a display filter from a list of protocol fields, described in 
		 <xref linkend="ChWorkFilterAddExpressionSection"/>
	  </para>
	</listitem>
	<listitem>
	  <para>
	    The right middle button labeled "Clear" resets the current 
	    display filter and clears the edit area.
	  </para>
	</listitem>
	<listitem>
	  <para> 
	    The rightmost button labeled "Apply" applies the current 
	    value in the edit area as the new display filter.
	  </para>
	</listitem>
      </itemizedlist>
    </para>
	  <note><title>Note!</title>
	  <para>
		Applying a display filter on large capture files might take quite a long time!
	  </para>
	  </note>
  </section> 
	  
  <section id="ChUsePacketListPaneSection"><title>The "Packet List" pane</title>
    <para>
      The packet list pane displays all the packets in the current capture 
	  file.
    <figure id="ChUseEtherealListPane">
      <title>The "Packet List" pane</title>
      <graphic entityref="EtherealListPane" format="PNG"/>
    </figure>
	Each line in the packet list corresponds to one packet in the capture 
	file. If you select a line in this pane, more details will be displayed in 
	the "Packet Details" and "Packet Bytes" panes.
    </para>
    <para>
	While dissecting a packet, Ethereal will place information from the 
	protocol dissectors into the columns. As higher level protocols might
	overwrite information from lower levels, you will typically see the 
	information from the highest possible level only. 
    </para>
    <para>	
	For example, let's look at a packet containing TCP inside IP inside
	an Ethernet packet. The Ethernet dissector will write its data (such as 
	the Ethernet addresses), the IP dissector will overwrite this by its own 
	(such as the IP addresses), the TCP dissector will overwrite the IP 
	information, and so on.
    </para>
    <para>
	There are a lot of different columns available. Which columns are 
	displayed can be selected by preference settings, see 
	<xref linkend="ChCustPreferencesSection"/>.
    </para>
    <para>
	The default columns will show:
	<itemizedlist>
	<listitem>
	  <para><command>No.</command>
	  The number of the packet in the capture file. This number won't change, 
	  even if a display filter is used.
	  </para>
	</listitem>
	<listitem>
	  <para><command>Time</command>
	  The timestamp of the packet. The presentation format of this timestamp 
	  can be changed, see <xref linkend="ChWorkTimeFormatsSection"/>.
	  </para>
	</listitem>
	<listitem>
	  <para><command>Source</command>
	  The address where this packet is coming from. 
	  </para>
	</listitem>
	<listitem>
	  <para><command>Destination</command>
	  The address where this packet is going to.
	  </para>
	</listitem>
	<listitem>
	  <para><command>Protocol</command>
	  The protocol name in a short (perhaps abbreviated) version.
	  </para>
	</listitem>
	<listitem>
	  <para><command>Info</command>
	  Additional information about the packet content.
	  </para>
	</listitem>
	</itemizedlist>
    </para>
    <para>
	There is a context menu (right mouse click) available, see details in 
	<xref linkend="ChWorkPacketListPanePopUpMenu"/>.
    </para>
  </section> 	  

  <section id="ChUsePacketDetailsPaneSection"><title>The "Packet Details" pane</title>
    <para>
      The packet details pane shows the current packet (selected in the "Packet List" 
	  pane) in a more detailed form.
    <figure id="ChUseEtherealDetailsPane">
      <title>The "Packet Details" pane</title>
      <graphic entityref="EtherealDetailsPane" format="PNG"/>
    </figure>
    </para>
    <para>
	This pane shows the protocols and protocol fields of the packet selected 
	in the "Packet List" pane. The protocols and fields of the packet are 
	displayed using a tree, which can be expanded and collapsed. 
    </para>	
    <para>
	There is a context menu (right mouse click) available, see details in 
	<xref linkend="ChWorkPacketDetailsPanePopUpMenu"/>.
    </para>
    <para>
	Some protocol fields are specially displayed. 
    </para>	
	<itemizedlist>
	<listitem>
    <para>
	<command>Generated fields</command>
	Ethereal itself will generate additional protocol fields which are 
	surrounded by brackets. The information in these fields is derived from the 
	known context to other packets in the capture file. For example, Ethereal 
	is doing a sequence/acknowledge analysis of each TCP stream, 
	which is displayed in the [SEQ/ACK analysis] fields of the TCP protocol.
    </para>	
	</listitem>
	<listitem>
    <para>	
	<command>Links</command>
	If Ethereal detected a relationship to another packet in the capture file, 
	it will generate a link to that packet. Links are underlined and displayed 
	in blue. If double-clicked, Ethereal jumps to the corresponding packet. 
    </para>	
	</listitem>
	</itemizedlist>
  </section> 	  

  <section id="ChUsePacketBytesPaneSection"><title>The "Packet Bytes" pane</title>
    <para>
      The packet bytes pane shows the data of the current packet (selected in the "Packet List" 
	  pane) in a hexdump style.
    <figure id="ChUseEtherealBytesPane">
      <title>The "Packet Bytes" pane</title>
      <graphic entityref="EtherealBytesPane" format="PNG"/>
    </figure>
    </para>
    <para>
	As usual for a hexdump, the left side shows the offset in the packet data, 
	in the middle the packet data is shown in a hexadecimal representation and 
	on the right the corresponding ASCII characters (or . if not appropriate) 
	are displayed.
    </para>
    <para>
	There is a context menu (right mouse click) available, see details in 
	<xref linkend="ChWorkPacketBytesPanePopUpMenu"/>.
    </para>
    <para>
	Depending on the packet data, sometimes more than one page is available,
	e.g. when Ethereal has reassembled some packets into a single chunk of 
	data, see <xref linkend="ChAdvReassemblySection"/>. In this case there are 
	some additional tabs shown at the bottom of the pane to let you select 
	the page you want to see.
    <figure id="ChUseEtherealBytesPaneTabs">
      <title>The "Packet Bytes" pane with tabs</title>
      <graphic entityref="EtherealBytesPaneTabs" format="PNG"/>
    </figure>
    </para>
	<note><title>Note!</title>
	<para>
	The additional pages might contain data picked from multiple packets.
	</para>
	</note>
    <para>
	The context menu (right mouse click) of the tab labels will show a list of 
	all available pages. This can be helpful if the size in the pane is too 
	small for all the tab labels.
    </para>
  </section> 	  

  <section id="ChUseStatusbarSection"><title>The Statusbar</title>
    <para>
      The statusbar displays informational messages.
    </para>
    <para>
	In general, the left side will show context related information, while the 
	right side will show the current number of packets.
    </para>
    <para>
    <figure id="ChUseEtherealStatusbarEmpty">
      <title>The initial Statusbar</title>
      <graphic entityref="EtherealStatusbarEmpty" format="PNG"/>
    </figure>
	This statusbar is shown while no capture file is loaded, e.g. when 
	Ethereal is started.
	</para>
	<para>
		<figure id="ChUseEtherealStatusbarLoaded">
		  <title>The Statusbar with a loaded capture file</title>
		  <graphic entityref="EtherealStatusbarLoaded" format="PNG"/>
		</figure>
		The left side shows information about the capture file, its 
		name, its size and the elapsed time while it was being captured.
	</para>
	<para>
		The right side shows the current number of packets in the 
		capture file. The following values are displayed:
	    <itemizedlist mark="bullet">
	    <listitem>
		<para><emphasis>P:</emphasis> the number of captured packets</para>
	    </listitem>
	    <listitem>
		<para><emphasis>D:</emphasis> the number of packets currently being 
		displayed</para>
	    </listitem>
	    <listitem>
		<para><emphasis>M:</emphasis> the number of marked packets</para>
	    </listitem>
	    </itemizedlist>
	</para>
	<para>
    <figure id="ChUseEtherealStatusbarSelected">
      <title>The Statusbar with a selected protocol field</title>
      <graphic entityref="EtherealStatusbarSelected" format="PNG"/>
    </figure>
		This is displayed if you have selected a protocol field from the 
		"Packet Details" pane. 
    </para>
    <tip><title>Tip!</title>
	<para>
		The value between the brackets (in this example
		<command>arp.opcode</command>) can be used as a display filter string, 
		representing the selected protocol field.
	</para>
    </tip>
  </section> 	  

</chapter>
<!-- End of EUG Chapter 3 -->