Shark SE400 User's Guide download pdf (Page 183)

Customizing Wireshark

174

to the my.lua script.

If two scripts were

loaded, such as -X

lua_script:my.lua

and -X

lua_script:other.lua

in that order, then a -X

lua_script2:bar

would pass the string

bar to the second

lua script, namely

other.lua.

-z <statistics-string> Get Wireshark to collect various types of statistics and display

the result in a window that updates in semi-real time.

10.3. Packet colorization

A very useful mechanism available in Wireshark is packet colorization. You can set up Wireshark so

that it will colorize packets according to a display filter. This allows you to emphasize the packets

you might be interested in.

You can find a lot of coloring rule examples at the Wireshark Wiki Coloring Rules page at https://

wiki.wireshark.org/ColoringRules.

There are two types of coloring rules in Wireshark: temporary rules that are only in effect until you

quit the program, and permanent rules that are saved in a preference file so that they are available the

next time you run Wireshark.

Temporary rules can be added by selecting a packet and pressing the Ctrl key together with one of the

number keys. This will create a coloring rule based on the currently selected conversation. It will try

to create a conversation filter based on TCP first, then UDP, then IP and at last Ethernet. Temporary

filters can also be created by selecting the Colorize with Filter → Color X menu items when right-

clicking in the packet detail pane.

To permanently colorize packets, select View → Coloring Rules…. Wireshark will display the

“Coloring Rules” dialog box as shown in Figure 10.1, “The “Coloring Rules” dialog box”.

1 2 ... 178 179 180 181 182 183 184 185 186 187 188 ... 227 228

No comments

Shark SE400 User's Guide Page 183