The welcome screen has a handy field for setting a capture filter. When this feature is used, the filter is stored and can be retrieved later by clicking the triangle at the end of the field. Clicking the triangle seems to reveal every filter ever entered in the field. How can I remove some of the stored filters?
Find your storage of local settings, by opening the About Wireshark dialog and selecting the Folders tab. There you find the location of your Personal configuration.
Opening that reveals a folder with a bunch of files, one of which is recent_common. It is in this file that the latest used capture filters are stored. Stop Wireshark and using your favourite ascii editor remove the lines you want gone. Then start Wireshark again and check the results.
Asked: 2020-08-05 16:00:32 +0000
Seen: 196 times
Last updated: Aug 05 '20
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
Is it "every filter ever entered" or limited to the list size specified in
Edit->Preferences...->Appearance?