Under View, select Coloring Rules. There you will see the
default rules and what the colors are indicating.
[mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of jon
jon Sent: Tuesday, July 21, 2009 13:00 PM To:
wireshark-users@xxxxxxxxxxxxx Subject: [Wireshark-users] colored
I am new to wire shark and was wondering when I am running it. I see a line
that is black with a packet, what does that exaclty mean. I know there is a way
to set up a color code to different things. but I have'nt change any color
scheme, just using the default color setup. So what does that mean the black
colored packet. it says in the information down below unreassembled packet
incorrect tcp checksum. What is that telling me? I don't understand how to tell
what the colors are telling me about the packets. is there some guide that tells
you what color a packet is doing?