This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Filter to remove display of rdp packets

0

What is the proper filter to use that will prevent the display of rdp, tcp source and destination 3389, packets?

asked 10 Jul '13, 08:56

johnspin's gravatar image

johnspin
1111
accept rate: 0%


One Answer:

1

try "not tcp.port==3389"

answered 10 Jul '13, 08:57

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

!tcp.port==3389 worked. Thanks.

(10 Jul '13, 09:06) johnspin