Ask Your Question
0

Capture filter doesn't accept expression for Display filter

asked 2018-07-27 16:52:14 +0000

tsuru gravatar image

updated 2018-07-27 23:00:41 +0000

grahamb gravatar image

This is a very basic question but my Wireshark 2.6.2 does not accept same filter expression as capture filter and as display filter. "ip.addr==192.168.10.100" is valid for display filter (the background turns green) but not for capture filter (it turns red). Was this so from the version 1.x?

edit retag flag offensive close merge delete
add a comment

1 Answer

Sort by ยป oldest newest most voted
1

answered 2018-07-27 17:02:37 +0000

Jim Aragon gravatar image

Yes, capture filters have always used a different syntax from display filters. A brief explanation of capture filters can be found on this page on the Wireshark wiki.

edit flag offensive delete link more
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2018-07-27 16:52:14 +0000

Seen: 684 times

Last updated: Jul 27 '18