Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] How do I change the default capture filter?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Lori" <Verdandi@xxxxxxxxxxxxxxxxxx>
Date: Thu, 6 Aug 2009 18:48:07 -0400

Title: How do I change the default capture filter?
If you click on Help  |  About Wireshark and go to the Folders tab, it will show you the path for both Global and Personal configurations.
 
Hope this helps.
 
Lori
 
----- Original Message -----
From: Bland, Alan
To: wireshark-users@xxxxxxxxxxxxx
Sent: Thursday, August 06, 2009 2:10 PM
Subject: [Wireshark-users] How do I change the default capture filter?

At some time in the past I created a filter and managed to set it as the default filter, because every time I start Wireshark and start a capture that filter is shown in the "capture filter" text box.

This is a problem because I deleted the filter, so it is not found.

How do I remove this default setting.

To fix it I resorted to uninstalling wire shark (1.0.7) and reinstalled it.  The default filter was the non-existent filter.

I uninstalled wireshark and install ethereal (0.99).  The default filter was still the non-existent filter.
I uninstalled ethereal and installed wireshark (2.0 the July 2009 release).  The default capture filter was still the non-existent filter.

I scanned the registry for the name of the filter.  Not found.
I searched the entire C: drive looking for the filter by name.  Not found.

This is like a spirit from the other side that has not found peace and cannot rest.

Your help is needed.  How do I remove this setting?


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
  • References:
    • [Wireshark-users] How do I change the default capture filter?
      • From: Bland, Alan
  • Prev by Date: Re: [Wireshark-users] find local IP from cap-file
  • Next by Date: [Wireshark-users] VLAN Tags?
  • Previous by thread: [Wireshark-users] How do I change the default capture filter?
  • Next by thread: [Wireshark-users] "Response/Request in frame" link in my decoded packets -- gone missing
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation