Getting started
---------------
-This text will try to take you though the first steps of using Ethereal.
+This text will try to take you though the first steps of using Wireshark.
Display
-------
-When you start Ethereal, you will see the program window vertically divided into the following parts:
+When you start Wireshark, you will see the program window vertically divided into the following parts:
-window title
-menu
-packet bytes (empty)
-statusbar (with filter toolbar)
-As Ethereal has no packet data when started, most of the program's window is just empty.
+As Wireshark has no packet data when started, most of the program's window is just empty.
Many of the features available in the menu will also be on the main toolbar.
First capture file
------------------
-The first thing you probably want to do is look at some captured network data/packets:
+The first thing you probably want to do is look at some captured network data/packets.
This can be achieved by two methods:
-open an already existing capture file
-capture something from your own network
-It might be easier to start with an example capture file from "http://www.ethereal.com/sample" before capturing your own data.
+It might be easier to start with an example capture file from "http://www.wireshark.org/sample" before capturing your own data.
You can open a capture file through the menu "File->Open..." (or the toolbar).
Coloring Rules
--------------
-The packet list can be colored; this means applying different colors for different packets. For example you could choose to have all HTTP packets shown in red and all other TCP traffic shown in yellow.
+The packet list can be colored; this means applying different colors for different packets. For example you could choose to have all HTTP packets shown in red and all other TCP traffic shown in yellow. There are two types of color rules, temporary (only used in this session) and permanent (save between sessions).
+
+Temporary coloring rules can be created by either pressing <ctrl> and one of the number keys (0-9). This will create a conversation color rule based on the currently selected packet. Temporary color rules can also be added by choosing "color X" from different menus.
+
+Under "View->Coloring Rules..." you will see a list of permanentcolor rules. This list is processed for each packet from top to bottom, until one of the rules matches (in which case the color settings of that rule are used for that packet). If no rule matches, the packet will not be colored at all.
-Under "View->Coloring Rules..." you will see a list of color rules. This list is processed for each packet from top to bottom, until one of the rules matches (in which case the color settings of that rule are used for that packet). If no rule matches, the packet will not be colored at all.
Please note: setting lots of color rules can slow down processing time a bit when showing huge capture files.
Other display things
----------
There are a lot more features than described here. Just have a look at the menus to see them all. :-)
-For more information about Ethereal, see: "http://www.ethereal.com". You can get a users' guide and other useful information there.
+For more information about Wireshark, see: "http://www.wireshark.org". You can get a user's guide and other useful information there.
-We hope this helped you with the first steps of using Ethereal and that you will enjoy using this program.
+We hope this helped you with the first steps of using Wireshark and that you will enjoy using this program.
git.samba.org / obnox / wireshark / wip.git / blobdiff