Wireshark-dev: Re: [Wireshark-dev] File format and coloring rules.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Tue, 30 Nov 2010 10:31:55 -0700
On Tue, Nov 30, 2010 at 09:43:16AM +0100, Agustin Figueredo Canosa wrote:

> 2 - I�d like to use different colors rules depending on the host 
> directions. How can i do that? Obviously, I dont know this directions 
> untill the frame arrives.

Typically, the client connects to a particular port on the server.  For 
example, you could use a color filter such as "tcp.srcport == 80" for 
traffic returning from a web server (server -> client) and "tcp.dstport 
== 80" for traffic going to a web server (client -> server).