diff options
| author | Roland Knall <rknall@gmail.com> | 2022-10-28 15:38:30 +0100 |
|---|---|---|
| committer | A Wireshark GitLab Utility <gerald+gitlab-utility@wireshark.org> | 2022-10-31 18:53:50 +0000 |
| commit | 5f46ce935e089d0606265648dda3e58eec54c8ec (patch) | |
| tree | 6fd49ae9e04683a0744d1f898f322f04675c5bd5 /resources | |
| parent | 58390334ebfd9819433e0a3f13237bdd5bd16bb5 (diff) | |
Profiles: Fix export crashing for single profile
When the classic profile has been cloned, and it contains
coloring rules, that are no longer valid or their syntax is
wrong, the export of single profiles will fail.
The reason for that is still being investigated. It seems
there might be an issue with selecting the right coloringfilter
to be selected.
This change only fixes the coloringrules file and the
index is selected from the base model instead
Diffstat (limited to 'resources')
| -rw-r--r-- | resources/share/wireshark/profiles/Classic/colorfilters | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/resources/share/wireshark/profiles/Classic/colorfilters b/resources/share/wireshark/profiles/Classic/colorfilters index 5f8db510b8..85ed3f0e55 100644 --- a/resources/share/wireshark/profiles/Classic/colorfilters +++ b/resources/share/wireshark/profiles/Classic/colorfilters @@ -1,18 +1,18 @@ # DO NOT EDIT THIS FILE! It was created by Wireshark -@Bad TCP@tcp.analysis.flags && !tcp.analysis.window_update@[0,0,0][65535,24383,24383] +@Bad TCP@tcp.analysis.flags && !tcp.analysis.window_update && !tcp.analysis.keep_alive && !tcp.analysis.keep_alive_ack@[0,0,0][65535,24383,24383] @HSRP State Change@hsrp.state != 8 && hsrp.state != 16@[0,0,0][65535,63222,0] @Spanning Tree Topology Change@stp.type == 0x80@[0,0,0][65535,63222,0] @OSPF State Change@ospf.msg != 1@[0,0,0][65535,63222,0] -@ICMP errors@icmp.type eq 3 || icmp.type eq 4 || icmp.type eq 5 || icmp.type eq 11 || icmpv6.type eq 1 || icmpv6.type eq 2 || icmpv6.type eq 3 || icmpv6.type eq 4@[0,0,0][0,65535,3616] +@ICMP errors@icmp.type in { 3..5, 11 } || icmpv6.type in { 1..4 }@[0,0,0][0,65535,3616] @ARP@arp@[55011,59486,65534][0,0,0] @ICMP@icmp || icmpv6@[49680,49737,65535][0,0,0] @TCP RST@tcp.flags.reset eq 1@[37008,0,0][65535,63121,32911] @SCTP ABORT@sctp.chunk_type eq ABORT@[37008,0,0][65535,63121,32911] -@TTL low or unexpected@( ! ip.dst == 224.0.0.0/4 && ip.ttl < 5 && !pim) || (ip.dst == 224.0.0.0/24 && ip.dst != 224.0.0.251 && ip.ttl != 1 && !(vrrp || carp))@[42148,0,0][60652,61680,60395] -@Checksum Errors@cdp.checksum.status=="Bad" || edp.checksum.status=="Bad" || ip.checksum.status=="Bad" || tcp.checksum.status=="Bad" || udp.checksum.status=="Bad"|| sctp.checksum.status=="Bad" || mstp.checksum.status=="Bad"@[0,0,0][65535,24383,24383] -@SMB@smb || nbss || nbns || nbipx || ipxsap || netbios@[65534,64008,39339][0,0,0] -@HTTP@http || tcp.port == 80@[36107,65535,32590][0,0,0] -@IPX@ipx || spx@[65534,58325,58808][0,0,0] +@TTL low or unexpected@(ip.dst != 224.0.0.0/4 && ip.ttl < 5 && !pim && !ospf) || (ip.dst == 224.0.0.0/24 && ip.dst != 224.0.0.251 && ip.ttl != 1 && !(vrrp || carp))@[42148,0,0][60652,61680,60395] +@Checksum Errors@eth.fcs.status=="Bad" || ip.checksum.status=="Bad" || tcp.checksum.status=="Bad" || udp.checksum.status=="Bad" || sctp.checksum.status=="Bad" || mstp.checksum.status=="Bad" || cdp.checksum.status=="Bad" || edp.checksum.status=="Bad" || wlan.fcs.status=="Bad" || stt.checksum.status=="Bad"@[0,0,0][65535,24383,24383] +@SMB@smb || nbss || nbns || netbios@[65534,64008,39339][0,0,0] +@HTTP@http || tcp.port == 80 || http2@[36107,65535,32590][0,0,0] + @DCERPC@dcerpc@[51199,38706,65533][0,0,0] @Routing@hsrp || eigrp || ospf || bgp || cdp || vrrp || carp || gvrp || igmp || ismp@[65534,62325,54808][0,0,0] @TCP SYN/FIN@tcp.flags & 0x02 || tcp.flags.fin == 1@[41026,41026,41026][0,0,0] |