Capture filter dialog looks different than shown in help. There are 6 buttons on the bottom - create, remove, copy, OK Cancel Help. No way to specify a filter string or to save the filter. What is wrong? asked 21 Apr '16, 17:17  bgailer |
2 Answers:
Double click the "Filter" field to edit in-line. Hit enter to save it. answered 22 Apr '16, 08:17  grahamb ♦ |
Double-click the Name field to edit the name; double-click the Filter field to edit the filter. All the functionality of the old dialog is present in the new interface. answered 24 Apr '16, 17:44  Jim Aragon |
All that does is let me edit the name. The dialog shown in help (see below) lets me do other (more useful) things.
Note I said to click a "Filter" field. That's the column of entries with filter expressions in.
As @Jim Aragon noted, double clicking a Name field, i.e. the column of entries with filter names in, allows you to edit the filter name.
The thing I see missing from the Qt version of the "Display Filters" dialog is the "Expression builder" button, and that isn't present on the GTK legacy capture filter dialog which was your original question.
If there is no current item outstanding for this on the Wireshark Bugzilla, please raise an "enhancement" request to have it added.