display filter is green, but capture shows up blank

edit

If filtering from challenge 3-1 q&a why would the capture be blank ?

If filtering from challenge 3-1 q&a

As asked before: where does the challenge question comes from?

why would the capture be blank ?

Only if you filter for something that is actually present in the capture, the list won't be 'blank'.

What you mean where the question comes from. The question is How many frames comes to and from 80.78.246.209. This is just a simple ip.addr==80.78.246.209 I apply the filter and the capture comes back blank.

What you mean where the question comes from.

To quote grahamb comment on May 28th: "Can you add a link to the website where the challenge question comes from?"

You cannot assume we know about all challenges / trainings / courses / books out there that contain the word "Wireshark" in the title... So if you want support on a network capture you'll have to provide that here by sharing a link.

So you used ip.addr==80.78.246.209 as a display filter, then the answer is still valid:

• It is 'green' because the syntax is correct.
• When no frame in your network capture contains this IP-address, zero frames will be shown in the display when applied.
  Use Statistics / Endpoints to list what is present.