Ethereal Team, I really appreciate all the responses. I apologize for the
earlier confusion. My terminology was not as precise as it should have
been. I was referring to highlighting the packet summary line if any
protocol item was in error. That's where the initial confusion came in.
I'm going to add hidden, filterable attributes to the items I want to check
for errors. I can then create a filter line that has all the protocols I
want and their respective error fields. I should be in business.
I do think some sort of automatic highlighting and/or filtering on the
generic concept of packets in error may be a nice addition to this already
wonderful tool. [I admit I'm not as well-versed in the tool as I'd like and
do not feel comfortable in adding the items Guy mentioned could be done to
support errored frame reporting in a more generic manner.] Perhaps I'll
play around with this some in the near future.
Thanks again for all the responses,
Karl
Guy Harris wrote:
> > I am not sure if one can filter on a hidden item.
>
> The *only* difference between a hidden item and a non-hidden item is
> that hidden items don't get displayed in the packet list window, and
> don't get printed by Tethereal or the "print frame" or "print" options.
>
> Other than that, they are *exactly* the same as non-hidden items, and
> can be filtered on.
>
> If they couldn't be filtered on, it'd be as if they didn't exist, as you
> could neither see them nor filter on them, in which case they'd have no
> reason to exist.