This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Disabling discovery of interfaces on startup

0

Is it possible to not discover all the possible interfaces to capture on when starting wireshark? If I have many interfaces connected it can take over a minute for wireshark to start up as it finds all the interfaces connected to the computer. Instead I would like to specify which interface(s) I would like to monitor either in a config file or startup parameter.

asked 22 Aug '16, 15:48

saxguy's gravatar image

saxguy
6112
accept rate: 0%


One Answer:

0

That is currently not possible. It would require changes in interface handling, User Interface, preference handling and other areas. You can file an enhancement request for someone to implement this.

Depending on the platform you use, it maybe possible to run Wireshark in a network namespace / VM / Container or whatnot and use its remote capture capabilities. That would limit its exposure to all interfaces.

answered 23 Aug '16, 02:50

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%