This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi I'm using Wireshark with long display filers e.g (wlan_mgt.fixed.status_code == 0x0000) && (wlan.fc.type_subtype == 0x0b) and switch between them many times. Can I define alias for these filters, i.e I enter myfilter1 instead of (wlan_mgt.fixed.status_code == 0x0000) && (wlan.fc.type_subtype == 0x0b)?

asked 10 Apr '17, 00:01

SuBCo's gravatar image

SuBCo
16226
accept rate: 0%

edited 10 Apr '17, 00:02


Sure, go to Analyze -> Display Filters to get a dialog that allow you to enter filters and give them a meaningful name. Unfortunately, it seems that in the Qt version you can't then apply those filters :-(

permanent link

answered 10 Apr '17, 03:05

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%

How should i use them? Can I do logical operation with them like: and, or, not

(10 Apr '17, 07:33) SuBCo

I think there's a bug in the GUI, in the old GTK version any selected filter would be used on clicking "OK" on the dialog. You could also click "Apply" to apply the filter and keep the dialog open.

(10 Apr '17, 08:12) grahamb ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×165

question asked: 10 Apr '17, 00:01

question was seen: 812 times

last updated: 10 Apr '17, 08:12

p​o​w​e​r​e​d by O​S​Q​A