This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Getting started (capture filter)

0

Using rev 1.4.3

My Capture Filter window does not look like the one in the help file. There are no Apply or Save options. How do I create or load a new filter?

asked 02 Feb '11, 12:01

garyhibb's gravatar image

garyhibb
1111
accept rate: 0%


One Answer:

0

It is just a bit quirky until you get used to it. One might expect the "new" button to bring up a dialog box similar to the Expression builder with display filters. Actually, when you manually type in a filter name, a filter string and click new, it adds a new capture filter. So it is sort of like the viewing, creation and deletion of filters is all integrated into the two text boxes. Mess around with it, you will figure it out. What might be a struggle is learning the syntax, unless you are already familiar with the Berkeley Packet Filter format.

answered 02 Feb '11, 13:45

Paul%20Stewart's gravatar image

Paul Stewart
3018
accept rate: 6%