This is our old Q&A Site. Please post any new questions and answers at

Where is the filter expression file located? The reason i ask is when I perform an uninstall my original filter expression remain.

asked 04 Apr '15, 15:30

mewireshark's gravatar image

accept rate: 0%

Which filter expressions? Color filters? Saved display filters?

(04 Apr '15, 19:17) Guy Harris ♦♦

The filter expression found under edit-filter-preference.Also found on the first button right of the save button.

(06 Apr '15, 02:21) mewireshark

sounds like a duplicate to this question:

(06 Apr '15, 03:05) Kurt Knochner ♦

under edit-filter-preference

Presumably you mean "under Edit -> Preferences when you click on Filter Expressions".

Those are stored in ~/.wireshark/preferences; look for the heading

####### Filter Expressions ########

and the gui.filter_expressions items under it.

That's a personal file, not a system file, so it should not be surprising that uninstalling doesn't remove it. Uninstalling applications of any sort, not just Wireshark, tends not to uninstall personal configuration files.

permanent link

answered 06 Apr '15, 10:34

Guy%20Harris's gravatar image

Guy Harris ♦♦
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 04 Apr '15, 15:30

question was seen: 2,131 times

last updated: 06 Apr '15, 10:34

p​o​w​e​r​e​d by O​S​Q​A