This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

delete/edit display filter history

0

how can I clear the display filter history in the dropdown box? It's easy to delete saved filters but not apparent how to edit/delete the history.

asked 11 Oct '10, 19:37

ziplock's gravatar image

ziplock
6233
accept rate: 0%


3 Answers:

2

There is no functionality within Wireshark to edit/delete the filters in the display filter history. However, the entries are saved in the file "recent_common" in your personal preferences folder (see "Help -> About wireshark -> Folders" for the location of this folder on your system).

answered 11 Oct '10, 23:05

SYN-bit's gravatar image

SYN-bit ♦♦
17.1k957245
accept rate: 20%

1

Go to
Edit -> Preferences...
Change the number at Filter display max. list entries: 10
Click Apply and OK

Or change the Preferences file.
C:\Users\user\AppData\Roaming\Wireshark\Preferences or look for the file location at
Help -> About wireshark -> Folders

Change the number at:
# The max. number of entries in the display filter list.
# A decimal number.
gui.recent_display_filter_entries.max: 10

answered 11 Oct '10, 21:16

joke's gravatar image

joke
1.3k4934
accept rate: 9%

edited 11 Oct '10, 21:46

0

Got it, thanks!

answered 12 Oct '10, 07:28

ziplock's gravatar image

ziplock
6233
accept rate: 0%