Ethereal-dev: Re: [Ethereal-dev] Next Release: Win32 NSIS installer pendingquestions
In the interests of completeness and as a straw man, this is the one I
use. It's of the every-protocol-a-different-colour type, but the
colours used are pastel, so not in your face. If you want such a filter
set provided as standard then this is probably pretty good.
As an addition you could duplicate some of the filters and set the
foreground colour red for error conditions.
You could also add VOIP, which I don't see on my networks.
--
Richard Urwin
# DO NOT EDIT THIS FILE! It was created by Ethereal
@Bad TCP@tcp.checksum_bad@[58981,65534,65534][65535,0,0]
@Bad UDP Broadcast@udp.checksum_bad and eth.dst == FF:FF:FF:FF:FF:FF@[39321,65534,52428][65535,0,0]
@Bad UDP@udp.checksum_bad@[58980,65533,62258][64045,1611,7179]
@TCP Broadcast@ eth.dst == FF:FF:FF:FF:FF:FF and tcp@[39320,65534,65534][0,0,0]
@UDP Broadcast@xxxxxxx == FF:FF:FF:FF:FF:FF and udp@[39320,65534,52428][0,0,0]
@ARP@arp@[64045,64045,64045][0,45874,12997]
@SSL@ssl@[65535,58981,58981][0,0,0]
@HTTP@http@[58979,65533,65533][2368,28135,41703]
@FTP@ftp@[58980,65534,65534][8072,0,41939]
@Netbios session service@ nbss@[58980,65534,65534][46171,46171,4617]
@DCERPC TCP@dcerpc and tcp@[58980,65534,65534][45874,45874,4587]
@TCP@tcp@[58981,65535,65535][0,0,0]
@DNS@dns@[58979,65533,62256][0,45874,12997]
@Netbios Name Service@nbns@[58979,65533,62256][0,45874,12997]
@UDP@udp@[58976,65530,62258][0,0,0]
@netbios@netbios@[63895,65533,58979][45874,45874,4587]
@LLC@llc@[63895,65534,58980][45874,45874,4587]