Very nice.
Looking forward to phase two with import/export functionality.
One colorfilter I find very useful (but requires TCP sequence number
analysis to be enabled)
is "tcp.analysis.flags" which in my local install marks interesting tcp
segments in red.
Retransmissions, duplicate acks etc are then very easy to spot.
Another useful colorfilter would be all ICMP packets except Echo.
Also ONC-RPC/DCE-RPC/SMB packets that returns an error.
----- Original Message -----
From: "Richard Urwin"
Sent: Sunday, May 11, 2003 11:40 AM
Subject: [Ethereal-dev] Check-in Request - colorfilters enhancement
> Here is the first phase of the enhancement of color filters:
>
> If no colorfilters file is found in the user's personal configuration,
> Ethereal will try to read the system-wide colorfilters file from the
> DATADIRectory, (eg /usr/local/share/ethereal.)
>
> Editing the color filters will result in the display of the system-wide
> default filters, which will then be saved to the user's file when the SAVE
> button is pressed. So the user can add filters to the default set, or
remove
> filters from it.
>
> A REVERT button is provided to delete the user's file. The colouration
then
> reverts to the system-wide defaults.
>
> The system-wide colorfilters file must be copied to the Data Directory by
> hand.
>
> Also fixed:
> gtk/color_filters.c:read_filters did not close the file handle.
>
> Not fixed:
> The CANCEL button should probably be labeled CLOSE, as it does not undo
any
> changes that have been made.
>
> This patch has been built and tested on Linux (MDK9.1) GTK 1
> It has not been built or tested on:
> a) Windows
> b) GTK2
>
> With these provisos, please check in the enclosed patch.
>
> I also enclose a colorfilters file suitable for use as a system-wide
defaults
> file.
>
> Phase 2 will add the ability to export some or all filters to the
system-wide
> defaults file, or any other file, and to import from any file.
>
> --
> Richard Urwin
>