Wireshark · Wireshark-users: Re: [Wireshark-users] Configure coloring rule for [TCP segment of a reassembled PDU]

[sean bzd <seanbzd@xxxxxxxxx>]

Joan,
Thanks. I tried it but this approach works only for the current
conversation/stream because the filter contains specific port and host
information that is very specific to that packet. I wanted it as a
general rule so that whenever  a reassembled PDU segment is
encountered, a coloring rule can be applied.

> Hi Sean,
>
> You can create temporary coloring rules.
> Select a packet.
> Go to View -> Colorize Conversation -> Select a color
> This will create a coloring rule based on the currently selected conversation.
>
> You can also right-click on a packet and use the context menu.
>
> Use CTRL + Space to reset the coloring rules.
>
> Hope this helps
> Joan
>
>
> On Wed, 8 Apr 2009 18:35:57 -0400 sean wrote:
>
> >I'm getting a lot of [TCP segment of a reassembled PDU] messages. These
> are
> >expected and I understand why this is happening. I'm wondering if there
> is
> >a
> >way to identify them and configure a coloring rule. Any ideas? Appreciate
> >any help.
> >___________________________________________________________________________
> >Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> >Archives:    http://www.wireshark.org/lists/wireshark-users
> >Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> >             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
>
>