I'm currently working on a dissector and I'd like to add my own color rule. It worked, but now, I'd like to change the foreground color that I've chosen. However, when I try to save with "Ok", an error message pops up telling me: "Your coloring rules file contains unknown rule. Wireshark doesn't recognize one or more of you coloring rules. They have been disabled."
I don't understand why it doesn't work. Even if I open the rules and close them just by clicking "Ok", the same message pops up, even if there isn't any modification. I also tried to remove all the rules, the message still appears.
Do you have any idea?
Thanks in advance,
asked 24 Jul '17, 07:17
edited 24 Jul '17, 07:18
My suggestion would be to navigate to your "Personal configuration" directory (Help -> About Wireshark -> Folders -> Personal configuration) and rename your
After that, navigate to the Wireshark installation directory and copy the default
At this point, you should be able to add your custom color filters either via Wireshark's GUI or by copying/pasting your custom entries from your saved file to the new file using any text editor.
Note: You will likely need to perform these steps for all of your profiles in which a
answered 24 Jul '17, 12:07