Ask Your Question
0

Capture/Display Filters

asked 2019-11-11 00:41:44 +0000

Hi,

This is probably a stupid question, but my WireShark seems to ignore what is listed in the Capture Filters window. By default there is already a list, but if I deleted them all, "everything" is still displayed in the display window. If I apply a Display Filter, then it works - only that is displayed.

It appears the Capture Filters list is ignored! What is going on here?

Please advise.

Thanks.

Julian

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
0

answered 2019-11-11 04:21:43 +0000

Guy Harris gravatar image

By default there is already a list, but if I deleted them all, "everything" is still displayed in the display window.

To which display window are you referring? If I delete all the capture filters in the Capture > Capture Filters... window, click "OK", and then reopen that window, it shows no capture filters. And, once I've deleted the filters, iIf I click on the green ribbon on the left-hand side of the "Enter a capture filter" box on the main screen, it now shows no capture filters.

However, if I click on the right side of the "Enter a capture filter" box on the main screen, it shows filters - because those aren't from the Capture > Capture Filters... list, those are automatically remembered filters that have been used in the past.

edit flag offensive delete link more
0

answered 2019-11-11 00:54:14 +0000

bubbasnmp gravatar image

Capture -> Capture Filters... is used to manage the list of Capture Filters available on

Capture -> Options -> Capture filter for selected interfaces:

These are used when capturing packets with Wireshark. To limit the packets in the Packet List apply a Display Filter.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-11-11 00:41:44 +0000

Seen: 58 times

Last updated: Nov 11