This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

delete/edit display filter history

0	how can I clear the display filter history in the dropdown box? It's easy to delete saved filters but not apparent how to edit/delete the history. filters history asked 11 Oct '10, 19:37 ziplock 6●2●3●3 accept rate: 0%

3 Answers:

There is no functionality within Wireshark to edit/delete the filters in the display filter history. However, the entries are saved in the file "recent_common" in your personal preferences folder (see "Help -> About wireshark -> Folders" for the location of this folder on your system).

answered 11 Oct '10, 23:05

SYN-bit ♦♦
17.1k●9●57●245
accept rate: 20%

Go to
Edit -> Preferences...
Change the number at Filter display max. list entries: 10
Click Apply and OK

Or change the Preferences file.
C:\Users\user\AppData\Roaming\Wireshark\Preferences or look for the file location at
Help -> About wireshark -> Folders

Change the number at:
# The max. number of entries in the display filter list.
# A decimal number.
gui.recent_display_filter_entries.max: 10

answered 11 Oct '10, 21:16

joke
1.3k●4●9●34
accept rate: 9%

edited 11 Oct '10, 21:46

0	Got it, thanks! answered 12 Oct '10, 07:28 ziplock 6●2●3●3 accept rate: 0%