This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I have just installed the latest Wireshark on my Macbook Pro. I want to analyze some pcaps that were sent to me. I can open the pcap files just fine, and all looks normal on the screen. However, when I go to filter on 'TCP' and apply the filter, nothing happens. Moreover, when I right-click on the row/packet I am interested in, nothing happens.

Any thoughts or ideas are appreciated.

asked 21 Jan '14, 16:18

slinky's gravatar image

slinky
11112
accept rate: 0%


when I go to filter on 'TCP' and apply the filter, nothing happens.

well, if the first few frames (the ones visible in Wireshark) are all TCP, you won't see any difference if you apply the display filter: tcp ;-) Is that the case?

Moreover, when I right-click on the row/packet I am interested in, nothing happens

What does that actually mean? Don't you get a pop-menu where you can select "Follow TCP Stream" (and other options)?

If so, here are some questions

  • what is your OS version
  • what is your Wireshark version
  • is there anything special on your system, like swapped mouse button, etc.?

Regards
Kurt

permanent link

answered 24 Jan '14, 07:53

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 24 Jan '14, 07:54

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×349
×165
×53

question asked: 21 Jan '14, 16:18

question was seen: 2,052 times

last updated: 24 Jan '14, 07:54

p​o​w​e​r​e​d by O​S​Q​A