path: root/colorfilters
AgeCommit message (Collapse)AuthorFilesLines
2016-07-21Add proto_tree_add_checksum.Michael Mann1-1/+1
This is an attempt to standardize display/handling of checksum fields for all dissectors. The main target is for dissectors that do validation, but dissectors that just report the checksum were also included just to make them easier to find in the future. Bug: 10620 Bug: 12058 Ping-Bug: 8859 Change-Id: Ia8abd86e42eaf8ed50de6b173409e914b17993bf Reviewed-on: https://code.wireshark.org/review/16380 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Jeff Morriss <jeff.morriss.ws@gmail.com> Reviewed-by: Michael Mann <mmann78@netscape.net>
2015-08-22OSPF database packets and OSPF hellos in DC mode are unicast. AtJoerg Mayer1-1/+1
least Cisco sends out these packets with a TTL of 1. Change-Id: I9ef0cd486d200a768329cfb758b87e20e3456663 Reviewed-on: https://code.wireshark.org/review/10188 Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2015-04-27Clean up STT pluginJesse Gross1-1/+1
This adds some essential features for STT dissection including using a heuristic IP dissector to ensure we get the right traffic, segment reassembly, and additional field decoding. Based on work original done by Andrew Evans. Change-Id: Ic89d6b16803185c7f58b73935c2646d532d0ae14 Reviewed-on: https://code.wireshark.org/review/8187 Reviewed-by: Alexis La Goutte <alexis.lagoutte@gmail.com> Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2013-08-30Add HTTP2 to colorfiltersAlexis La Goutte1-1/+1
svn path=/trunk/; revision=51593
2013-06-18Update "TTL low or unexpected" coloring rule to ignore vrrp, carp and ↵Michael Mann1-2/+2
MulticastDNS all of which intentionally use TTL 255. Bug 5010 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5010) Add carp to routing protocols while we're at it. svn path=/trunk/; revision=50014
2013-05-01Add a "profiles" directory. Add a Bluetooth global profile with theGerald Combs1-24/+0
current default+Bluetooth colors and a Classic global profile with the old 1.8 colors. Remove the Bluetooth rules from the default profile. svn path=/trunk/; revision=49116
2013-04-29Darken and saturate the "trouble" backgrounds a bit.Gerald Combs1-18/+18
svn path=/trunk/; revision=49084
2013-03-30From Michal Labedzki via ↵Evan Huus1-0/+2
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8509 Add basic support for Bluetooth GNSS profile. It uses NMEA-0183, but that is not free, so all we can do is add filtering and displaying for ASCII content. Also add colors for DUN, GNSS to show them in contrast to RFCOMM. svn path=/trunk/; revision=48662
2013-03-17Enhance 802.11 FCS check - Replace proto_tree_add_* by proto_tree_add_item - ↵Alexis La Goutte1-1/+1
Add bad FCS to colorfilters svn path=/trunk/; revision=48361
2013-02-25From Michal Labedzki via ↵Evan Huus1-0/+1
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8396 Add Bluetooth HCRP dissector. From me: rename a preference to be a bit clearer. svn path=/trunk/; revision=47878
2013-02-21From Michal Labedzki via ↵Evan Huus1-0/+1
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8366 Add support for bluetooth MCAP Protocol. svn path=/trunk/; revision=47804
2012-10-29From Michal Labedzki:Anders Broman1-0/+1
[PATCH 18] Bluetooth: Add colofilter for ATT protocol Add colofilter for ATT protocol. Why "green"? Looks good and ATT seems to be similar to SDP - use attributes. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7639 svn path=/trunk/; revision=45826
2012-10-19Revert the background color for TCP and lighten it for UDP. Change theGerald Combs1-4/+4
ARP background to differntiate it from UDP. svn path=/trunk/; revision=45658
2012-10-06Reduce the contrast for many of the rules. Most of the color values wereGerald Combs1-22/+22
taken from http://emilis.info/other/extended_tango/ . svn path=/trunk/; revision=45350
2012-09-25From Michal Labedzki:Anders Broman1-7/+11
Bluetooth: fix order of colors For Bluetooth each color is assigned to dissector, but higher position on that list is needed for meet encapsulation requirements, for example AVRCP is on top of AVCTP, AVCTP is on top of L2CAP, etc. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7639 svn path=/trunk/; revision=45122
2012-09-24From Michal Labedzki:Anders Broman1-7/+8
Add Bluetooth Profile AVRCP. Supported version: 1.5. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7740 svn path=/trunk/; revision=45099
2012-09-24From Michal Labedzki:Anders Broman1-0/+1
Bluetooth: Add colorfilter for SAP dissector. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7715 svn path=/trunk/; revision=45098
2012-09-24From Michal Labedzki:Anders Broman1-0/+1
Add Bluetooth Protocol AVCTP. Supported version: 1.4. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7675 svn path=/trunk/; revision=45097
2012-09-14From Michal Labedzki:Anders Broman1-0/+1
Bluetooth: Add color for HID dissector https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7639 svn path=/trunk/; revision=44897
2012-09-14From Michal Labedzki:Anders Broman1-0/+1
Add Bluetooth Protocol BNEP. Supported version: 1.0. I changed offset to be an int to follow WS convention.While at it I changed other types to fit the tvb_get routines. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7719 svn path=/trunk/; revision=44894
2012-09-11Revert r44869Jakub Zawadzki1-1/+1
svn path=/trunk/; revision=44878
2012-09-11Use correct protocol name for Bluetooth Handsfree color filtersPascal Quantin1-1/+1
svn path=/trunk/; revision=44869
2012-09-10From Michal Labedzki:Anders Broman1-0/+10
Bluetooth: Add colors for Bluetooth dissectors Add color for: HCI_CMD, HCI_EVT, SCO, L2CAP, RFCOMM, HFP and OBEX. https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7639 svn path=/trunk/; revision=44834
2012-07-25From Stephen Donnelly via ↵Jeff Morriss1-1/+1
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7500 : The default colorfilter for "Bad Checksum" does not include the Ethernet Frame Check Sequence (FCS) test. It seems reasonable that it should be included in this filter rule. It is only indicated if the Ethernet dissector "Validate the Ethernet checksum if possible" preference is set and the FCS is believed to be present (via wiretap heuristic/dissector preference). From me: re-order the list of bad checksum fields. svn path=/trunk/; revision=44010
2011-06-29Don't colorize TCP window updates as "Bad TCP". This change was made in ↵Chris Maynard1-1/+1
response to a user request at Sharkfest '11. svn path=/trunk/; revision=37836
2011-04-29Add default color filters for SCTP abort messages and checksum errors.Jeff Morriss1-1/+2
svn path=/trunk/; revision=36944
2011-01-21From Alexis La Goutte via ↵Jeff Morriss1-1/+1
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5604 : A small patch to add color rules for ICMPv6 Error (some error as ICMP(v4)..) With this patch, Wireshark is ready for IPv6 Day ;) svn path=/trunk/; revision=35611
2010-02-05From Chris Maynard:Jaap Keuter1-1/+1
Take into account PIM protocol specifics with regards to TTL when colorizing packets. svn path=/trunk/; revision=31807
2009-03-09From Steve Karg:Jaap Keuter1-1/+1
Corrected the size of the for-loop counter declaration, added expert info and checksum_[good|bad] flags. Added the MS/TP checksum bad setting to Checksum color filter. svn path=/trunk/; revision=27670
2009-02-26Use same coloring rule for icmp and icmpv6.Stig Bjørlykke1-1/+1
svn path=/trunk/; revision=27557
2008-11-06Removed colorfilters for infiniband, as this dissector is not available whenStig Bjørlykke1-4/+0
building/running without plugins. svn path=/trunk/; revision=26710
2008-07-30From Stephen Donnelly:Anders Broman1-0/+4
Infiniband Dissector Plugin 1.2.0 svn path=/trunk/; revision=25876
2008-05-22Note to self: read documentation first.Stig Bjørlykke1-1/+1
Reverted previous change... svn path=/trunk/; revision=25353
2008-05-22Fix multicast address for "TTL low or unexpected".Stig Bjørlykke1-1/+1
svn path=/trunk/; revision=25352
2008-01-03Fix for Bug 2151:Jaap Keuter1-1/+1
Mask out all multicast addresses by their prefix, which is 4 bit wide i.s.o. 24 bit svn path=/trunk/; revision=23990
2007-11-21Cosmetic change to order the icmp.typeStig Bjørlykke1-1/+1
svn path=/trunk/; revision=23533
2007-08-28On 2nd thought: change color filter name from "Low TTL" to "TTL low or ↵Bill Meier1-1/+1
unexpected" svn path=/trunk/; revision=22717
2007-08-28From Todd Martin: "Flag IP TTL more intelligently".Bill Meier1-1/+1
Also: Change default "Low TTL" color filter to match. svn path=/trunk/; revision=22715
2006-12-14Add checksum verification to the CDP dissector and add an entry for thisStephen Fisher1-1/+1
in the main colorfilters file. svn path=/trunk/; revision=20134
2006-10-29make the checksum fields visible for TCP and UDPUlf Lamping1-1/+1
svn path=/trunk/; revision=19727
2006-06-30Do it properly now: "ipx || stx" -> "ipx || spx"Jaap Keuter1-1/+1
svn path=/trunk/; revision=18620
2006-06-30From Stephen Fisher:Jaap Keuter1-1/+1
The default colorfilters file in Wireshark has an entry titled IPX. It matches "ipx || stp" which should probably be "ipx || spx". svn path=/trunk/; revision=18618
2006-05-22ethereal->wireshark updatesRonnie Sahlberg1-1/+1
svn path=/trunk/; revision=18206
2006-02-13Add redirects to the ICMP filter.Gerald Combs1-1/+1
svn path=/trunk/; revision=17284
2005-08-27- Add checksum verificationJörg Mayer1-1/+1
- Add checksum check to colorfilters svn path=/trunk/; revision=15563
2005-08-26fix #378:Ulf Lamping1-1/+1
use "ip.checksum_bad == 1" instead of simply "ip.checksum_bad" in the example colorfilter file, as the implementation of that filter string changed install the global example files unconditionally by the win32 installer, to fix this problem and be compatible with the unix install process svn path=/trunk/; revision=15535
2005-07-11fix a syntax error in the "Routing" rule, reported by Jeff MorrissUlf Lamping1-1/+1
svn path=/trunk/; revision=14898
2005-06-17Tweak the global coloring rules a bit. Give "normal" traffic pastelGerald Combs1-6/+15
backgrounds and "bad" traffic bold backgrounds, which is the strategy used in some of the sample coloring rules. Include a few rules from the samples as well. svn path=/trunk/; revision=14685
2005-06-09provide global default files for cfilters/colorfilters/dfiltersUlf Lamping1-0/+11
at least the colorfilters file needs some more "finetuning" NSIS (Win32): install these files into the Ethereal Program dir, but don't overwrite existing ones makefile.am: I've added the three files to EXTRA_DIST and pkgdata_DATA, which *seems* to be the right places svn path=/trunk/; revision=14595