Ethereal-users: Re: [Ethereal-users] Colour filter problem

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Sat, 24 Jan 2004 00:16:15 +0000
On Wed, 21 Jan 2004 18:06:38 +0000, you wrote:

>On Tuesday 20 Jan 2004 6:46 pm, el_lobo@xxxxxxxxxxxxxxx wrote:
>> Have just downloaded the latest version of Ethereal and installed it
>> on NT4 workstation. Seems to capture and display data OK, but when I
>> tried to set up some colour filters it keeps giving me the error:
>>
>> 'Filter "name" did not compile correctly. Please try again. Filter
>> unchanged. Unexpected end of filter string'
>>
>> and won't store the filter expression.
>
>What is the filter string you are trying to use?

After posting the question I determined that the problem seems to be
with the 'Add expression' function within the colour rules dialogue
box (sorry but as I'm a novice with this currently I am using the GUI
version as a quick way to get it running!)

If I give a filter name of tcpdata (say) and then use the add
expression button to create the filter string - and choose TCP in the
left column, and 'is present' in the right column. The string is then
created as 'filtertcp', which I originally thought was a predefined
string for showing TCP traffic. However after a little more
experimentation I realised that by just setting the string to 'tcp' it
did what I wanted. So the main issue seems to be with the string
definition via the GUI, which is a little unfortunate as it is a
usability feature (but not the end of the world, provided you dig
further).

Just as a final check can anybody confirm that the issue that I'm
seeing with filter string definition is happening with them also - or
am I still doing something wrong?