1 | initial version |
If there is anything in the payload that indicates the direction of the traffic, than you could use that as you would have the same colors for client/server traffic regardless of the IP addresses.
If not, you could add ip.src<ip.dst
to one coloring rule and ip.src>ip.dst
to the second coloring rule, but than each IP pair will select the color for client traffic and server traffic individually. But within the session, you at least have a distinction between client and server traffic.