Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] File format and coloring rules.

From: Stephen Fisher <steve@xxxxxxxxxxxxxxxxxx>
Date: Tue, 30 Nov 2010 10:31:55 -0700
On Tue, Nov 30, 2010 at 09:43:16AM +0100, Agustin Figueredo Canosa wrote:

> 2 - I�d like to use different colors rules depending on the host 
> directions. How can i do that? Obviously, I dont know this directions 
> untill the frame arrives.

Typically, the client connects to a particular port on the server.  For 
example, you could use a color filter such as "tcp.srcport == 80" for 
traffic returning from a web server (server -> client) and "tcp.dstport 
== 80" for traffic going to a web server (client -> server).