This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Capture filter dialog does not have options to edit a filter.

0

Capture filter dialog looks different than shown in help. There are 6 buttons on the bottom - create, remove, copy, OK Cancel Help. No way to specify a filter string or to save the filter. What is wrong?alt text

asked 21 Apr '16, 17:17

bgailer's gravatar image

bgailer
6112
accept rate: 0%


2 Answers:

0

Double click the "Filter" field to edit in-line. Hit enter to save it.

answered 22 Apr '16, 08:17

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

All that does is let me edit the name. The dialog shown in help (see below) lets me do other (more useful) things.alt text

(24 Apr '16, 15:52) bgailer

Note I said to click a "Filter" field. That's the column of entries with filter expressions in.

As @Jim Aragon noted, double clicking a Name field, i.e. the column of entries with filter names in, allows you to edit the filter name.

The thing I see missing from the Qt version of the "Display Filters" dialog is the "Expression builder" button, and that isn't present on the GTK legacy capture filter dialog which was your original question.

If there is no current item outstanding for this on the Wireshark Bugzilla, please raise an "enhancement" request to have it added.

(25 Apr '16, 02:39) grahamb ♦

0

Double-click the Name field to edit the name; double-click the Filter field to edit the filter. All the functionality of the old dialog is present in the new interface.

answered 24 Apr '16, 17:44

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%