In the interests of completeness and as a straw man, this is the one I
use. It's of the every-protocol-a-different-colour type, but the
colours used are pastel, so not in your face. If you want such a filter
set provided as standard then this is probably pretty good.
As an addition you could duplicate some of the filters and set the
foreground colour red for error conditions.
You could also add VOIP, which I don't see on my networks.
--
Richard Urwin
# DO NOT EDIT THIS FILE! It was created by Ethereal
@Bad [email protected]_bad@[58981,65534,65534][65535,0,0]
@Bad UDP [email protected]_bad and eth.dst == FF:FF:FF:FF:FF:FF@[39321,65534,52428][65535,0,0]
@Bad [email protected]_bad@[58980,65533,62258][64045,1611,7179]
@TCP Broadcast@ eth.dst == FF:FF:FF:FF:FF:FF and tcp@[39320,65534,65534][0,0,0]
@UDP Broadcast@xxxxxxx == FF:FF:FF:FF:FF:FF and udp@[39320,65534,52428][0,0,0]
@ARP@arp@[64045,64045,64045][0,45874,12997]
@SSL@ssl@[65535,58981,58981][0,0,0]
@HTTP@http@[58979,65533,65533][2368,28135,41703]
@FTP@ftp@[58980,65534,65534][8072,0,41939]
@Netbios session service@ nbss@[58980,65534,65534][46171,46171,4617]
@DCERPC TCP@dcerpc and tcp@[58980,65534,65534][45874,45874,4587]
@TCP@tcp@[58981,65535,65535][0,0,0]
@DNS@dns@[58979,65533,62256][0,45874,12997]
@Netbios Name Service@nbns@[58979,65533,62256][0,45874,12997]
@UDP@udp@[58976,65530,62258][0,0,0]
@netbios@netbios@[63895,65533,58979][45874,45874,4587]
@LLC@llc@[63895,65534,58980][45874,45874,4587]