This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is possible to export/save a wieshark file with colourized packets that have been filtered?

Hi all,

In wireshark is possible to filter some packets and colorize them (i.e. put in "Red" all packets of a specific filter applied). My question is: Is it possible to save/export the wireshark file with all colourized filters that have been applied in order to see them again later? I know that is possible to export the filtered packets, but I want to export them with the colours.

Thank you in advacne.

Regards.

filter coloringpetit

asked 10 Feb '16, 09:34

Nairda
6●2●2●4
accept rate: 0%

One Answer:

The two things are independent. As you already know, you can use File -> Export Specified Packets to save only packets shown by the display filter currently applied. And when in the coloring rules management window (View -> Coloring rules), you can select rules from the list (click with Ctrl, Shift, or with both together works the way it usually does on lists) and then click Export to export the selected rules to a file.

The only exception from the rule is that if you haven't selected any rule and you press Export, all rules in the list are exported.

Import of a previously exported rule used to create a duplicate, I don't know whether it is still the case, try with one of the rules you've created.

answered 10 Feb '16, 13:39

sindy
6.0k●4●8●51
accept rate: 24%