Ask Your Question

Capture filter doesn't accept expression for Display filter

asked 2018-07-27 16:52:14 +0000

tsuru gravatar image

updated 2018-07-27 23:00:41 +0000

grahamb gravatar image

This is a very basic question but my Wireshark 2.6.2 does not accept same filter expression as capture filter and as display filter. "ip.addr==" is valid for display filter (the background turns green) but not for capture filter (it turns red). Was this so from the version 1.x?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2018-07-27 17:02:37 +0000

Jim Aragon gravatar image

Yes, capture filters have always used a different syntax from display filters. A brief explanation of capture filters can be found on this page on the Wireshark wiki.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2018-07-27 16:52:14 +0000

Seen: 386 times

Last updated: Jul 27 '18