Coloring the List View


 

You can apply colors to the text and background of different elements in the packet list view. This is especially useful for better distinction of addresses and protocols. You can change the colors in the following areas:

The color of the Time/Length information is used to distinguish packets that were collected from different network interface cards. You can change this color in the packet source view.

You can apply colors to any address description in the address database. Either right-click an address name in the packet list and choose Properties in the context-menu to open an edit dialog, or change the address colors on the address filter pages of the Settings dialog.

The text color of protocol names is set on the protocol filter page of the Settings dialog.

The background color of the rows in the packet list view depends on the protocols used in the corresponding packet. Consequently the background color is also set on the protocol filter page of the Settings dialog. But in contrast to the protocol foreground color, the background color may be deduced from the packet's lower layer protocols. If, for example, no background color was set for the HTTP protocol, the application will look whether some color was applied to one of the packet's lower layer protocols (TCP, IP, etc.). The first background color found, searching from upper to lower layer protocols, will be used.

Note: The default configuration assigns background colors to TCP Synch (green), TCP Reset (yellow), and TCP Final (red) packets.