Wireshark mailing list archives
Re: Display Filter troubleshooting
From: Sake Blok <sake () euronet nl>
Date: Mon, 7 Dec 2015 21:01:03 +0100
Hugo, You will need to use ${fwmon_if:eth1} if I read the friendly manual correctly (https://www.wireshark.org/docs/wsug_html_chunked/ChDisplayFilterMacrosSection.html) Cheers, Sake On 7 dec 2015, at 11:05, Hugo van der Kooij wrote:
Hi, I am trying to find where I did goof up in creating a display macro. I want to create a short cut for commands like: ((fw1.interface == "eth1") && ((fw1.direction == "i") || (fw1.direction == "O"))) So I got this in my display macro file now: # This file is automatically generated, DO NOT MODIFY. "fwmon_if","((fw1.interface == \x22$1\x22) && ((fw1.direction == \x22i\x22) || (fw1.direction == \x22O\x22)))" "fwmon_rtr","((fw1.interface == \x22$1\x22) && ((fw1.direction == \x22I\x22) || (fw1.direction == \x22o\x22)))" But it seems Wireshark is not willing to accept my macro. I can’t use for example: $fwmon_if{eth1} So I guess I am doing something horribly wrong but can’t figure out where I made the mistake. Anyone willing to share some light on this? Regards, Hugo Met vriendelijke groet / With kind regards, Hugo van der Kooij network engineer <imagee9e81a.JPG> Delft - Noord-Oost - Zuid <imagec005ef.PNG> <image4b32f3.JPG> <image9f897f.JPG> <imagea1fbba.JPG> T: +31 15 888 0 345 F: +31 15 888 0 445 E: hugo.van.der.kooij () qi nl I: www.qi.nl ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Display Filter troubleshooting Hugo van der Kooij (Dec 07)
- Re: Display Filter troubleshooting Sake Blok (Dec 07)
- Re: Display Filter troubleshooting Hugo van der Kooij (Dec 08)
- Re: Display Filter troubleshooting Stig Bjørlykke (Dec 08)
- Re: Display Filter troubleshooting Hugo van der Kooij (Dec 08)
- Re: Display Filter troubleshooting Sake Blok (Dec 07)