Ethereal-dev: RE: [Ethereal-dev] How to spot invalid checksum packets on COL_IN FO

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Richard Urwin <RUrwin@xxxxxxxxxxxxxx>
Date: Tue, 19 Nov 2002 09:18:21 -0000
And here's a version with the checksum checking in.


--
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."




-----Original Message-----
From: Richard Urwin [mailto:RUrwin@xxxxxxxxxxxxxx]
Sent: 19 November 2002 08:29
To: ethereal-dev@xxxxxxxxxxxx
Subject: RE: [Ethereal-dev] How to spot invalid checksum packets on
COL_IN FO


This is a very good idea.

I have a set of basic colour filters that have been posted to the list
previously. They would make a good basis for this standard.

TCP has a blue background (more intense for broadcasts)
UDP has a green background (more intense for broadcasts)
MS base protocols have a sandy background
SSL has a red (ok, pink :-) background

Name resolution protocols (ARP,DNS,NBNS) have a green foreground
HTTP has a blue foreground
FTP has a purple foreground
MS related protocols have a brown foreground

At the time I created these filters I also made some comments about the
user interface which may have some bearing on why they are not being
used:

"In doing this I found that the existing facilities didn't help me much,
I have a handfull of post-it notes covered with numbers that had to be
labouriously typed into the edit fields (which don't select-all on focus
acquisition either.) Also, when this is used in the field I imagine that
these colour settings are going to be corrupted (by user fiddling)
fairly frequently. So might I offer a couple of items for the wish list?

1. A "Copy From (other filter)" button for the colours.

2. On startup, read a colorfilters file from the system path in addition
to the user colourfilters file. Apply filters in this (system) file
after (ie with lower priority than) the filters in the user file. No
support is necessary to create this file, a knowledgable user can copy
the file there. It is not necessary to ship a default system file with
Ethereal. (sic)

(Later I'm sure we'll start asking for interleaving filters and support
for the system file. But we don't need it for the moment.)"
--
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."




-----Original Message-----
From: Ronnie Sahlberg [mailto:ronnie_sahlberg@xxxxxxxxxxxxxx]
Sent: 19 November 2002 07:40
To: jafour1@xxxxxxxxx; Michael Tuexen
Cc: ethereal-dev@xxxxxxxxxxxx
Subject: Re: [Ethereal-dev] How to spot invalid checksum packets on
COL_INFO


I find a lot of users are not aware of that color-filters exist at all.

Maybe we should start providing some default color-filters with the
distribution of ethereal.
This might get people to spot that : "hey some lines are marked red, I
wounder why and how they
got red,  hey color-filters  cool ill start using them for lots of
useful
stuff."

Could we add a color-filter to the default ethereal distribution that
flags
all
ip/udp/tcp checksums with a red background for the next release.
Probably we could use a lot of other default color filters as well
?



----- Original Message -----
From: "Michael Tuexen"
Sent: Tuesday, November 19, 2002 1:01 PM
Subject: Re: [Ethereal-dev] How to spot invalid checksum packets on
COL_INFO


> to find packets with incorrect checksum I'm using a Colorize
> Filter to display the packets in red, for example. For me
> that is very efficient.
>


_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev

________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________



________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________



________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________

Attachment: colorfilters
Description: Binary data