Skip to content

Instantly share code, notes, and snippets.

@denji
Created February 28, 2019 08:29
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save denji/42a58eeb64cf506ce9444a95e41f13a9 to your computer and use it in GitHub Desktop.
Save denji/42a58eeb64cf506ce9444a95e41f13a9 to your computer and use it in GitHub Desktop.
Wireshark troubleshooting colorfilters
@T-Small Window Sizes (<1320)@tcp.window_size < 1320 && tcp.window_size > 0@[65535,42405,0][0,0,0]
@T-Large Time Delay (>2 seconds)@frame.time_delta_displayed > 2.0@[65535,42405,0][0,0,0]
@T-DNS Error Responses@!dns.flags.rcode == 0 && dns.flags.response == 1@[42662,29041,4112][0,0,0]
@T-HTTP Error Response (>399)@http.response.code > 399@[65535,42405,0][0,0,0]
!@N-Window Update@expert.message == "Window update"@[0,25700,0][65535,65535,65535]
@I-SYN Packet@tcp.flags.syn == 1@[51657,2313,2313][65535,65535,65535]
@N-TCP Header > 20@tcp.hdr_len > 20@[0,25700,0][65535,65535,65535]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment