Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Is it possible to test a capture filter with already captured traffic?

Suppose I have some captured traffic where I apply a display filter which shows the frames I want. Now I would like to convert the display filter to capture filter and use it on real traffic. But before using it I would like to test it over the captured traffic. Is it possible?

Rephrasing, I would like to feed wireshark with an existing pcap file to get a new one through a capture filter.