Wireshark

  • Riverbed Technology
  • WinPcap
SHARKFEST '12 - Wireshark Developer and User Conference - June 24-27, 2012 - UC Berkeley, Clark Kerr Campus
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Applying Multiple Display Filters

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 31 Oct 2007 15:01:07 -0700


On Oct 31, 2007, at 1:53 PM, NLC wrote:

Is there an easy way to apply multiple display filters under Wireshark?

I want to be able to loadup a capture, apply a filter and look at the packets and further narrow it down by applying another without losing the first filter. I know I can AND it but the filter gets pretty long.

No, there isn't - the only way to do that is with an AND (and if we ever provided anything such as that, we'd probably implement it internally as an AND).

  • References:
    • [Wireshark-users] Applying Multiple Display Filters
      • From: NLC
  • Prev by Date: [Wireshark-users] Applying Multiple Display Filters
  • Previous by thread: [Wireshark-users] Applying Multiple Display Filters
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation