Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

How to delete packets in wireshark GUI?

I have a capture where I manually want to remove a few packets. I'm able to filter and select them using standard filter tools, however, I'm unable to remove them.

I know there's editcap, which I'd use for heavier editing. I don't want to switch to console just to remove a packet.

This works OK, but is a little cumbersome:

  • Select all packets I wish to keep (e.g. via filter or CTRL + click)
  • File - Export Specified Packets
  • In the dialog, I select Selected packets only instead of "All packets".
  • Export to a temporary file, then overwrite original