Wireshark · Ethereal-dev: Re: [Ethereal-dev] New View menu checkitem: "Colorize Packet List"

["John McDermott" <jjm@xxxxxxxxxx>]

On Sun, 27 Mar 2005 20:45:18 +0200, Ulf Lamping <ulf.lamping@xxxxxx> wrote:

> There seems to be some misunderstanding, what a default coloring scheme
> should be. I don't think there's a coloring scheme for all possible ways
> Ethereal is used, as the requirements differ *a lot*. There might be
> some basics like TCP/IP, but even that protocols are not used by all
> Ethereal users.

Yes. I agree.

> So what I would like to have is the following:
>
> Provide a very basic set of filters and rules of commonly known
> protocols (TCP, HTTP, ...), so a newbie get's an idea what the feature
> is all about and get some ideas to start it's own experiments. Providing
> a blank page as a start isn't a good start at all :-)

Yes.  Here's a link to some LANWatch screenshots on the (new) vendor's  
page:
http://sandstorm.net/products/lanwatch/screenshots
Note that it colorizes by *layer*.  We don't do that, yet, and that is a  
somewhat new (Few years I think) feature of Lanwatch.  Lanwatch is pretty  
expensive.

I have not looked at what is on the Wiki, yet, but I primarily color:
ARP  green
TCP  red
UDP  blue
whatever I am working on now   purple

--john
--
John McDermott, CCP
Writer, Educator, Consultant
jjm@xxxxxxxxxx        www.jkintl.com
V: +1 505/377-6293  F: +1 505/377-6313