/usr/share/doc/wireshark-doc/wsug_html_chunked/ChDisplayFilterMacrosSection.html is in wireshark-doc 2.0.2+ga16e22e-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 | <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>10.8. Display Filter Macros</title><link rel="stylesheet" type="text/css" href="ws.css"><meta name="generator" content="DocBook XSL Stylesheets V1.79.1"><link rel="home" href="index.html" title="Wireshark User Guide"><link rel="up" href="ChapterCustomize.html" title="Chapter 10. Customizing Wireshark"><link rel="prev" href="ChUserTable.html" title="10.7. User Table"><link rel="next" href="ChEssCategoryAttributes.html" title="10.9. ESS Category Attributes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">10.8. Display Filter Macros</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ChUserTable.html">Prev</a> </td><th width="60%" align="center">Chapter 10. Customizing Wireshark</th><td width="20%" align="right"> <a accesskey="n" href="ChEssCategoryAttributes.html">Next</a></td></tr></table><hr></div><div class="section"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="ChDisplayFilterMacrosSection"></a>10.8. Display Filter Macros</h2></div></div></div><p>Display Filter Macros are a mechanism to create shortcuts for complex filters.
For example defining a display filter macro named <span class="emphasis"><em>tcp_conv</em></span> whose text is
<span class="emphasis"><em>( (ip.src == $1 and ip.dst == $2 and tcp.srcport == $3 and tcp.dstport == $4)
or (ip.src == $2 and ip.dst == $1 and tcp.srcport == $4 and tcp.dstport == $3)
)</em></span> would allow to use a display filter like
<span class="emphasis"><em>${tcp_conv:10.1.1.2;10.1.1.3;1200;1400}</em></span> instead of typing the whole
filter.</p><p>Display Filter Macros can be managed with a <a class="xref" href="ChUserTable.html" title="10.7. User Table">Section 10.7, “User Table”</a> by selecting
<span class="guimenu">Analyze</span> → <span class="guimenuitem">Display Filter Macros</span> from the menu. The User Table has the
following fields</p><div class="variablelist"><dl class="variablelist"><dt><span class="term">
Name
</span></dt><dd>
The name of the macro.
</dd><dt><span class="term">
Text
</span></dt><dd>
The replacement text for the macro it uses $1, $2, $3, … as the input arguments.
</dd></dl></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="ChUserTable.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="ChapterCustomize.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="ChEssCategoryAttributes.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">10.7. User Table </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 10.9. ESS Category Attributes</td></tr></table></div></body></html>
|