Wireshark mailing list archives

Re: [Wireshark-commits] rev 37859: /trunk/ /trunk/gtk/: color_dlg.c /trunk/: color_filters.c color_filters.h


From: Sake Blok <sake () euronet nl>
Date: Mon, 4 Jul 2011 18:16:37 +0200

On 4 jul 2011, at 17:57, Guy Harris wrote:


On Jul 4, 2011, at 8:49 AM, Sake Blok wrote:

Where do you need that info, in the frame section of the packet details we list the following:

Coloring Rule Name: ___tmp_color_filter___01
Coloring Rule String: (ip.addr eq 192.168.0.104 and ip.addr eq 208.117.232.170) and (tcp.port eq 50388 and tcp.port 
eq 80)

If the rule isn't saved in the colorfilters file, does the rule's name serve any purpose other than to identify the 
rule in places such as the Frame section of the packet details?  

The rule is saved in the list of colorfilters in memory, but based on the filter-name-prefix it is not saved to the 
colorfilters file. The name of the temporary coloring rule is used to overwrite the filter with a new filter if another 
conversation/field is chosen for the particular temporary color. That's why it has a fixed name prefix and a trailing 
index number. The "fixed" name is also used when clearing the temporary coloring rules (CTRL+SPACE).

Cheers,


Sake


___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: