Display filter macros are used to create shortcuts for complex display filters, which you can configure once and use later.
To configure display filter macros, navigate to Analyze | Display Filter Macros | New.
You will get the following window:
$(macro_name:parameter1;paramater2;parameter3 …)
.test01
, which takes the following parameters as values:ip.src == <value>
tcp.dstport == <value>
This will be a filter that looks for packets from a specific source network that go out to the HTTP port.
A macro that takes these two parameters will be: ip.src==$1 && tcp.dstport==$2
.
ip.src == 10.0.0.4
and tcp.dstport == 80
, we should write the string ${test01:10.0.0.4;80}
in the display window bar.3.135.212.238