Hello,
I need to capture a frame lets call it "text".
For now I use a Display Filterthis way: Frame contains "text"
It works fine, BUT because it's just display filter Wireshark captures a lot in background. (Server 24/7)
So the problem is, filtering the results after a few hours take ages. It's not possible to work this way.
How can I use a CAPTURE FILTER for that "text" which ONLY captures the necessary stuff? Otherwise Wireshark dies during capturing because of so many captured data, which I don't need!
It's also not possible to use another kind of Capture Filter, because length, port and IP is always diff. The only constant thing is, that it's UDP protocol.
Some ideas?
