Wireshark · Ethereal-users: RE: [Ethereal-users] Colorization templates

["Eckert, Christopher" <CEckert@xxxxxxxxxxxxxx>]

Attached is one someone sent me


------------------------------------------------------------------------------
This e-mail transmission may contain information that is proprietary, privileged and/or confidential and is intended exclusively for the person(s) to whom it is addressed. Any use, copying, retention or disclosure by any person other than the intended recipient or the intended recipient's designees is strictly prohibited. If you have received this message in error, please notify the sender immediately by return e-mail and delete all copies.


==============================================================================

--- Begin Message ---

From: "Richard Urwin" <rurwin@xxxxxxxxxxxxxxx>

Date: Wed, 10 Apr 2002 06:02:14 -0400

Ok, I got interested and wasted some time.
I enclose a file which might act as a reasonable starting point for further
customisation:

TCP has a blue background (more intense for broadcasts)
UDP has a green background (more intense for broadcasts)
MS base protocols have a sandy background
SSL has a red (ok, pink :-) background

Name resolution protocols (ARP,DNS,NBNS) have a green foreground
HTTP has a blue foreground
FTP has a purple foreground
MS related protocols have a brown foreground

This decodes everything I could see in a brief capture or two on our
network.

In doing this I found that the existing facilities didn't help me much, I
have a handfull of post-it notes covered with numbers that had to be
labouriously typed into the edit fields (which don't select-all on focus
acquisition either.) Also, when this is used in the field I imagine that
these colour settings are going to be corrupted (by user fiddling) fairly
frequently. So might I offer a couple of items for the wish list?

1. A "Copy From (other filter)" button for the colours.

2. On startup, read a colorfilters file from the system path in addition to
the user colourfilters file. Apply filters in this (system) file after (ie
with lower priority than) the filters in the user file. No support is
necessary to create this file, a knowledgable user can copy the file there.
It is not necessary to ship a default system file with Ethereal.

(Later I'm sure we'll start asking for interleaving filters and support for
the system file. But we don't ned it for the moment.)

Also there is a bug:
Colorize Display->Select a filter->Edit->select a different filter->OK on
filter dialog
The newly selected filter in the list box is overwritten with the details of
the edited filter. This is only a display issue and doesn't seem to corrupt
any data.

-- 
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."
 

-----Original Message-----
From: Guy Harris [mailto:guy@xxxxxxxxxx]
Sent: Tuesday, April 09, 2002 9:09 PM
To: Eckert, Christopher
Cc: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Colors setting for Ethereal ?


On Tue, Apr 09, 2002 at 03:25:59PM -0400, Eckert, Christopher wrote:
> Didn't know it slowed it down! Still, of the 13 Network Engineers and 20
> something helpdesk people I have that I must make comfortable with
Ethereal,
> Almost all like being able to separate the protocols visually.

There are about 260 protocols currently supported by Ethereal; do they
really want somebody to pick 260 or so colors?  Or do they just have a
small selection of protocols to which they want colors assigned?

> If I can apply a single file to make a single color set be used then I can
> color the protocols they have to look for most often and make the coloring
> the same on every machine. If this will make them more comfortable using
> Ethereal at first then it is a good thing.
> 
> So we are sort of back to the question asked by Cedric. Are the color
> settings handled within a single file and if so which file is that?

No, the questions he asked were

	Does anobody has already configured a set of colors for various
	protocol (TCP, IP, UDP, SNMP, SMTP....)

and

	If yes ? can you send me the file you've set

so he presumably already *knew* that color filters are stored in a file,
and what file it is.

He probably *also* knows that there's no single system-wide file for
those colors; the colors are per-user settings, and each user has their
own file.

The file is "colorfilters", in the directory that holds the user's
personal configuration files - that'd be the ".ethereal" directory under
the user's home directory on UNIX, and the "Application Data\Ethereal"
directory under the user's profile directory on Windows.

The best way to create such a file is to load a capture file in
Ethereal, select color filters with the "Colorize Display..." item under
the "Display" menu, and save the filters with the "Save" button in the
dialog box, which will write that file out as your "colorfilters" file.

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________



________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________

Attachment: colorfilters
Description: Binary data

--- End Message ---