I'm wondering if there is a way to have ethereal flag certain packets after a capture. For example in Fluke Protocol Expert I can tell it to flag packets that are longer than 50ms ack times. When I'm done with the capture I know that whatever is in bold red is +50ms. It makes it easier for me when I need to print out a capture and review it with other engineers. This is not a really important thing, but would be nice. Thanks.
Regards, Mark Holloway Sr. Network Engineer - Arclight Systems 702-253-3861 // mobile 702.349.6170
