This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Mac OS filter removal

0

I am running Mountain lion 10.8 and cannot remove the displayed filter located on the top of the main screen to the right of expression. In my enclosed pic its "ME-exclude my ip src DST"

i have uninstalled and it still appears. How can I remove the filter?! Screen shot

asked 30 Mar '15, 14:57

mewireshark's gravatar image

mewireshark
6●3●3●6
accept rate: 0%

edited 30 Mar '15, 15:00

One Answer:

1

Go to

Edit -> Preferences -> Filter Expressions

Select the filter and click Remove.

Regards
Kurt

answered 30 Mar '15, 15:14

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

Thank you Kurt. any idea why it remained after performing an unistall as follows. #4 I rebooted instead. How do I uninstall?

1.  Remove /Applications/Wireshark.app
2.  Remove /Library/Application Support/Wireshark
3.  Remove the wrapper scripts from /usr/local/bin
4.  Unload the org.wireshark.ChmodBPF.plist launchd job
5.  Remove /Library/LaunchDaemons/org.wireshark.ChmodBPF.plist
6.  Remove the access_bpf group.
(30 Mar '15, 19:45) mewireshark

Your answer has been converted to a comment as that's how this site works. Please read the FAQ for more information.

(31 Mar '15, 01:56) Jaap ♦

any idea why it remained after performing an unistall as follows

Maybe because it's in your personal Wireshark preferences file, which probably survived the uninstall !?!

Did you try the steps I mentioned in my answer?

(31 Mar '15, 03:18) Kurt Knochner ♦

Kurt is correct when he says "Maybe because it's in your personal Wireshark preferences file" - uninstalls of applications generally do not remove personal configuration files for those applications.

(06 Apr '15, 10:35) Guy Harris ♦♦

thanks. I did not expect the hidden file to exist after uninstall.

(07 Apr '15, 03:10) mewireshark