On Mon, Jun 09, 2008 at 08:51:24PM -0700, David Underhill wrote:
> I've written a few custom dissectors / plugins for Wireshark, but I
> have one small problem: the row shows up in the red-on-black color
> scheme which is usually used to indicate that the checksum on a packet
> was bad. How can I tell Wireshark that a packet I've done the
> dissecting for is ok? (I can't seem to find it in the manual).
Check the coloring rules under the Edit menu to see which rule(s) cause
the red on black and see the string of filter(s) that causes it to
change to that color.
Steve