Wireshark · Ethereal-dev: Re: [Ethereal-dev] Colour filter issue

[John McDermott <jjm@xxxxxxxxxx>]

Mike,
I wrote the colorization code.  Unfortunately, I cannot check out your 
problems right now as I am trying to set up the computers for a new 
school due to open in a few days...

See below

Mike Frisch wrote:
> I am trying to use the following colour filter:
>
> nfs.status != 0 and nfs.status != 2
>
> but I still get packets marked that have nfs.status set to 2.  Is there
> something I am missing?  I have tried putting parenthesis still to no
> avail.

Please try the same as a display filter.  The code is the same.  If it 
works as a display filter, but not as a color filter, something strange 
is going on.  If neither works, it is a bug in the filtering code.

> Also, there's a problem in the "Add color to protocols" dialog.  If I
> click on "New" to create a new filter, and then click "Cancel" on the
> "Edit color filter" dialog that pops up, it still creates a new filter
> with the default name.

Yes.  I am not sure whether this was there from the beginning or was 
introduced later.  This needs to be fixed.

--john

--
John McDermott
Writer, Educator, Consultant
jjm@xxxxxxxxxx
V +1 505/377-6293 F +1 505/377-6313