This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to chose a capture-filter in version 1.8.0 as previous in the capture-options menu of version 1.6

2
1

Hello wireshark community

With version 1.6 I can choose/select a capture-filter in the capture-options dialog menue. In version 1.8 this option has disappeared in the capture-options dialog menue. How to select a capture-filter in version 1.8 by GUI? Perhaps only now with the -f parameter when I start wireshark?

I am not a very expirienced user of wireshark yet, but very impressed. Looked and searched in the documentation for my question but didn't find hints for a solution.

Thank you for your time and for your helpful answers.

asked 26 Jun '12, 21:11

georg49's gravatar image

georg49
36124
accept rate: 0%

edited 21 Aug '12, 11:54

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142


One Answer:

4

Wireshark 1.8 now allows capturing on multiple interfaces, and each interface can have its own capture filter, so the capture filter input field has been moved to the interface settings.

From the Capture Options dialog, double-click on the interface for which you want to set the capture filter. This will take you to the "Edit Interface Settings" dialog, and you will see the capture filter input field.

Note that the capture filter for each interface is actually shown in the Capture Options dialog, but it's to the far right and you have to scroll the display to make it visible.

answered 26 Jun '12, 21:55

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

Hello Jim

Thank you very much for your helpful answer. You made me happy cause I almost desperately searched about 2 hours for the solution. Prmanentely thinking that it should/must be there/anywehre but where?! Never doubleclicked on the interface to see that and didn't recognice the column titel in the interface window - so crazy. Thanks a lot again and have a good time.

Georg

(26 Jun '12, 22:21) georg49

answer accepted

(26 Jun '12, 22:43) georg49