Ethereal-dev: Re: [ethereal-dev] Proposing some ethereal projects ...
Jeff Foster wrote:
>
> First let me state that the fact that ethereal could colorize packets was
> highly praised at DefCon 2000.
That's great to hear:
>
> Not to pick nits, but in my mind arp is a top level protocol. I don't
> mean the top of the protocol stack when I say 'top level protocol', I'm
> refering to the highest protocol on the stack that ethereal decoded for
> the packet. This is just short cut is a quick and dirty "I want to
> highlite protocol - XXX".
Oh, I though you meant as a replacement to the existing scheme, not as
an addition. Sorry I misunderstood.
> > 2) (if necessary) extend the field selection to multiple fields
>
> Sounds hard. Something that extends beyond just colorize packets to
> complex filtering of packets based upon multiple fields and multi-selects
> in GTK.
>
> My main point is that if I really want a complex filter go the the Edit->
> Filters menu to do it. The right click short cut is a short cut to a
> simpler filter that doesn't require the user to understand the details
> of writing a filter. Please no flames about (L)users.
No flames from here! If it turns out to be difficult, just use the
selected field.
The result would be an addition to the existing right-click menu with
"Colorize Selected".
>
> Jeff Foster
> jfoste@xxxxxxxxxxxx
--john
--
John McDermott, Writer and Consultant
J-K International, Ltd.
V +1 505/377-6293 F +1 505/377-6313
jjm@xxxxxxxxxx
