Revision history  [back]

If there is anything in the payload that indicates the direction of the traffic, than you could use that as you would have the same colors for client/server traffic regardless of the IP addresses.

If not, you could add ip.src<ip.dst to one coloring rule and ip.src>ip.dst to the second coloring rule, but than each IP pair will select the color for client traffic and server traffic individually. But within the session, you at least have a distinction between client and server traffic.