How to do it...
- In order to configure a macro, you give it a name and you fill in the textbox with the filter string.
- In order to activate the macro, you simply write the following:
$(macro_name:parameter1;paramater2;parameter3 ...)
- Let's configure a simple filter name, test01, that takes the following parameters as values:
ip.src == <value> and tcp.dstport == <value>
- This will be a filter that looks for packets from a specific source network that goes out to an HTTP port.
A macro that takes these two parameters would be as follows:
ip.src==$1 && tcp.dstport==$2
- Now, in order to get the filter results for parameters we do the following:
ip.src == 10.0.0.4 and tcp.dstport == 80
- We should write the string in the display window bar as follows:
${test01:10.0.0.4;80}