
This rule has been described by hosaki and may contain old/wrong formula. Some protocols like TCP, HTTP, and FCS checksum which are default rule are disabled intentionally in order to give your attention to more important frames. You may override existing rules by changing the order. Note: The order of each coloring rule is important.

Disabled CAPWAP_Control to pay attention to CAPWAP Heartbeat frames.


Added some 802.11 and Cisco proprietary frames. Fixed some old obsolete syntax which is no longer supported in 2.4.0. Now the coloring rule file supports Wireshark 2.4.0.
