 | 1 | initial version |
Indeed filtering on time-differences is difficult as it changes the time-differences. For udp and tcp conversations, there are delta times available within a stream, which do not change by filtering. Have a look at the fields tcp.time_delta and udp.time_delta.
If that does not help, the answer to your original question to go to the next colored packet is to use the find function and then use the display filter option (which is the default) and then look for frame.coloring_rule.name == "TCP RST" (change the "TCP RST" to the name of your relevant color filter).
