绚色你的生活

# DO NOT EDIT THIS FILE! It was created by Ethereal
@[email protected] eq 80 or tcp.port eq 443@[22328,55704,24713][65083,65535,42083]
@[email protected] eq 53 or udp.port eq 53@[63477,65535,101][0,32767,0]
@Bad [email protected] or icmp@[0,0,0][57311,25186,25957]
@Microsoft@smb or nbns@[0,5080,65535][65535,65535,65535]
@IPX@ipx@[60652,0,1542][65535,65535,65535]
@DHCP@bootp@[39064,15934,40863][65535,65535,65535]
@Intel ANS probes@ans@[56173,56173,56173][0,0,0]
@Background Noise@stp or arp or eth.dst eq ff:ff:ff:ff:ff:ff@[65535,65535,65535][26214,26214,26214]

# DO NOT EDIT THIS FILE! It was created by Ethereal
@httptcp@ tcp.srcport == 80 or tcp.dstport == 80@[38385,62683,65534][0,0,0]
@DNS@dns@[19194,65534,32100][0,0,0]
@ARP@arp@[65202,65533,24456][0,0,0]
@icmp@icmp@[65534,8609,6712][0,0,0]
@STP@stp@[65534,65534,65534][8262,42200,9408]
@[email protected] == 139 or tcp.dstport == 139 or tcp.srcport == 138 or tcp.dstport == 138 or tcp.srcport == 137 or tcp.dstport == 137 or udp.srcport == 139 or udp.dstport == 139 or udp.srcport == 138 or udp.dstport == 138 or udp.srcport == 137 or udp.dstport == 137@[7961,5947,65534][64045,65535,62556]
@smtp@ tcp.srcport == 25 or tcp.dstport == 25@[65534,10208,51170][62059,62059,62059]
@pop@ tcp.srcport == 110 or tcp.dstport == 110@[65534,7268,54440][0,0,0]
@nntp@nntp@[49886,47154,63549][992,992,992]
@snmp@snmp@[62556,52730,2142][7636,32644,64045]
@igmp@igmp@[45944,5999,65534][0,0,0]
@telnet@ tcp.srcport == 23 or tcp.dstport == 23@[9274,47661,3862][0,0,0]
@tftp@tftp@[59220,3637,65534][0,0,0]
@ftp@ftp@[62721,6393,65534][0,13490,65038]
@Q931@q931@[14275,65534,25039][0,0,0]
@rsvp@rsvp@[60324,7655,65534][63348,65535,9481]
@CMIP@ udp.srcport == 164 or udp.dstport == 164@[47957,9122,9122][60977,63600,0]
@tcp@tcp@[40555,49091,65534][0,0,0]
@udp@udp@[39040,49264,65534][64542,64542,64542]

# DO NOT EDIT THIS FILE! It was created by Ethereal
@Linksys [email protected] contains 00:04:5A || eth.addr contains 00:06:25 || eth.addr contains 00:0C:41 || eth.addr contains 00:0F:66@[65535,50372,0][0,0,0]
@d-Link [email protected] contains 00:05:5D || eth.addr contains 00:0D:88 || eth.addr contains 00:0F:3D || eth.addr contains 00:00:50:BA || eth.addr contains 00:80:C8@[65535,50372,0][0,0,0]
@Netgear [email protected] contains 00:09:5B@[65535,50372,0][0,0,0]
@Unwanted Protocals@spx || ipx || aarp || aim@[65535,65535,65535][65535,0,0]
@SpanningTree Topology [email protected] == 0x80@[0,0,0][65535,63222,0]
@HSRP state change@ hsrp.state != 8 && hsrp.state != 16@[0,0,0][65535,63222,0]
@ospf state change@ ospf.msg != 1@[0,0,0][65535,63222,0]
@MS Master Browser [email protected]@[62965,63222,42148][65535,0,0]
@NW [email protected] || cdp || hsrp || vrrp || ospf || bgp || eigrp || rip || rtmp || eth.addr == 01:00:0c:cc:cc:cc@[43573,39932,39932][0,0,0]
@IP Time-to-Live < [email protected] < 5@[63736,26728,34952][0,0,0] @TCP [email protected]@[63736,26728,34952][0,0,0] @Bad IP [email protected]_bad@[63736,26728,34952][65535,65535,65535] @Bad UDP [email protected]_bad@[63736,26728,34952][65535,65535,65535] @Bad TCP [email protected]_bad@[63736,26728,34952][65535,65535,65535] @TCP Seg [email protected]@[63736,26728,34952][65535,65535,65535] @TCP Seg [email protected]@[63736,26728,34952][65535,65535,65535] @TCP Long Frag [email protected]@[63736,26728,34952][65535,65535,65535] @[email protected] & 0x02@[36663,59478,37540][607,3474,607] @[email protected] & 0x04@[61717,47055,24609][0,0,0] @[email protected] & 0x01@[56433,42925,57086][0,0,0] @HTTP@http@[30428,62589,62589][0,0,0] @TCP@tcp@[57455,60592,62451][0,0,0] @UDP@udp@[52264,63736,63736][0,0,0] @arp@arp@[65140,65535,49151][0,2987,65535]

选一款喜欢的，然后开始绚色生活吧！
不过要是阿梅能帮忙配配色就更好了，呵呵！（题外）