How to go to next colored packet

asked 2023-07-13 05:28:55 +0000

zhaoxian
1 ●1 ●2 ●5

I want to navigate to the next colored packet within the displayed packets in Wireshark. For example, I have colored the packets based on the time interval between them, and I want to only show packets that satisfy the original filtering conditions and have a time interval of more than 1 second. However, these colored packets cannot be filtered using a new filter because it would change the filtering results and not show the desired content. But now, I am unable to navigate based on the coloring. How can I achieve this?

answered 2023-07-13 08:14:19 +0000

SYN-bit

18528 ●9 ●338 ●255 https://SYN-b.it

Indeed filtering on time-differences is difficult as it changes the time-differences. For udp and tcp conversations, there are delta times available within a stream, which do not change by filtering. Have a look at the fields tcp.time_delta and udp.time_delta.

If that does not help, the answer to your original question to go to the next colored packet is to use the find function and then use the display filter option (which is the default) and then look for frame.coloring_rule.name == "TCP RST" (change the "TCP RST" to the name of your relevant color filter).

edit flag offensive delete link

Comments

Thanks, it works well.

zhaoxian ( 2023-07-13 10:49:59 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

How to go to next colored packet

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

How to go to next colored packet edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

How to go to next colored packet