To make tracking of packets and connections easier, Wireshark displays important events in unique colours. These colours can be changed and new ones added by clicking on View > Coloring Rules. You can create your own custom colouring rule by clicking on the New button. Give a name to the rule and enter a filter. Choose a background and foreground colour by clicking on the buttons below.

Click OK. These rules can be saved and loaded back again using the Export and Import buttons. For colouring of certain connections, select View > Colorize Conversation. You can also use the shortcuts [Ctrl] + [ 1] to [ 0] to set colours. The sequence of packets and transactions will be highlighted in that colour making it easy to find and understand.

Name: Colouring rules.jpg Views: 46 Size: 29.6 KB