This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How do I resume packet capture?

0

I'm on ubuntu 14.04. 'wireshark --version' report: "wireshark: 4351".

I start up wireshark, select an interface and begin to capture packets. If I hit the stop button, I can't start again. After stopping packet capture, if I hit the blue fin button ("Start Capturing Packets") packet capture doesn't resume.

I can a notification at the bottom of the UI that says "No Interface Selected".

I haven't been able to figure out how to select an interface at this point.

asked 24 Mar '16, 03:28

bobdobbs's gravatar image

bobdobbs
11114
accept rate: 0%

Your version number looks a bit odd, what does it show in Help -> About Wireshark?

(24 Mar '16, 03:57) grahamb ♦

One Answer:

1

You can't restart it once you stop. If you do that, you fundamentally break the packet trace. You can start a new capture after either saving or continuing without saving. If you go to capture options you'll be able to select the interface.

answered 24 Mar '16, 04:22

StuWhitby's gravatar image

StuWhitby
412
accept rate: 100%