Re: Display Filter troubleshooting

[Sake Blok <sake () euronet nl>]

Hugo,

You will need to use ${fwmon_if:eth1} if I read the friendly manual correctly 
(https://www.wireshark.org/docs/wsug_html_chunked/ChDisplayFilterMacrosSection.html)

Cheers,
Sake



On 7 dec 2015, at 11:05, Hugo van der Kooij wrote:

> Hi,
>  
> I am trying to find where I did goof up in creating a display macro.
>  
> I want to create a short cut for commands like:
> ((fw1.interface == "eth1") && ((fw1.direction == "i") || (fw1.direction == "O")))
>  
> So I got this in my display macro file now:
> # This file is automatically generated, DO NOT MODIFY.
> "fwmon_if","((fw1.interface == \x22$1\x22) && ((fw1.direction == \x22i\x22) || (fw1.direction == \x22O\x22)))"
> "fwmon_rtr","((fw1.interface == \x22$1\x22) && ((fw1.direction == \x22I\x22) || (fw1.direction == \x22o\x22)))"
>  
> But it seems Wireshark is not willing to accept my macro.
> I can’t use for example:
>             $fwmon_if{eth1}
>  
> So I guess I am doing something horribly wrong but can’t figure out where I made the mistake.
>  
> Anyone willing to share some light on this?
>  
> Regards,
> Hugo
>
>
> Met vriendelijke groet / With kind regards,
>
> Hugo van der Kooij
> network engineer
>
> <imagee9e81a.JPG>
>
> Delft - Noord-Oost - Zuid
> <imagec005ef.PNG>     <image4b32f3.JPG>       <image9f897f.JPG>       <imagea1fbba.JPG>
>
>
> T: +31 15 888 0 345   F: +31 15 888 0 445
> E: hugo.van.der.kooij () qi nl        I:  www.qi.nl
>
>
>
>
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    https://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe