Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Example.. Filter- sip.reason Wireshark shows packets which contains reason header. I would like to have header highlighted so that is easily identifiable.

So, if there's a display filter active, you want whatever entries in the packet details refer to a field in the filter expression that causes the packet to match to be highlighted with a different color? So:

  • sip.reason - color all instances of sip.reason
  • sip.reason == XXX - color all instances of sip.reason that have the value XXX

It gets more complicated for filters that involve "and", "or", and "not" operators.

There is currently no mechanism to support that, and that includes "no mechanism available to a Lua script to do that". You should file an enhancement request as an issue in the Wireshark issues list.