Wireshark mailing list archives

Display Filter troubleshooting


From: Hugo van der Kooij <hugo.van.der.kooij () qi nl>
Date: Mon, 7 Dec 2015 10:05:47 +0000

Hi,

I am trying to find where I did goof up in creating a display macro.

I want to create a short cut for commands like:
((fw1.interface == "eth1") && ((fw1.direction == "i") || (fw1.direction == "O")))

So I got this in my display macro file now:
# This file is automatically generated, DO NOT MODIFY.
"fwmon_if","((fw1.interface == \x22$1\x22) && ((fw1.direction == \x22i\x22) || (fw1.direction == \x22O\x22)))"
"fwmon_rtr","((fw1.interface == \x22$1\x22) && ((fw1.direction == \x22I\x22) || (fw1.direction == \x22o\x22)))"

But it seems Wireshark is not willing to accept my macro.
I can’t use for example:
            $fwmon_if{eth1}

So I guess I am doing something horribly wrong but can’t figure out where I made the mistake.

Anyone willing to share some light on this?

Regards,
Hugo


Met vriendelijke groet / With kind regards,



Hugo van der Kooij
network engineer

[cid:imagee9e81a.JPG@1d495708.488e0e50]<https://www.qi.nl/over-qi-ict>

Delft<https://www.qi.nl/vestigingen#delft> - Noord-Oost<https://www.qi.nl/vestigingen#Qi-ict-noordoost> - 
Zuid<https://www.qi.nl/vestigingen#qi-ict-zuid>
[cid:imagec005ef.PNG@ec06c51b.4e9d1756]<http://www.facebook.com/qiict>  [cid:image4b32f3.JPG@dc5caf11.4186b8c5] 
<https://nl.linkedin.com/company/qi-ict>        [cid:image9f897f.JPG@3696ad30.4aa4d7f3] <http://twitter.com/qiict>      
[cid:imagea1fbba.JPG@6a7ccbb6.49bfd972] <http://www.youtube.com/user/QiictDelft>


T: +31 15 888 0 345     F: +31 15 888 0 445
E: hugo.van.der.kooij () qi nl<mailto:hugo.van.der.kooij () qi nl>    I:  www.qi.nl<http://www.qi.nl>






___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: