Wireshark-users: Re: [Wireshark-users] How do I change the default capture filter
From: Wes <wes_r@xxxxxxxxx>
Date: Fri, 7 Aug 2009 06:06:51 -0700 (PDT)
You might be able to use masks to help narrow it down. For example: ip.addr==192.168.0.0/16 Wes --- On Fri, 8/7/09, Tony Barratt <tbarratt@xxxxxxxxxxx> wrote: > From: Tony Barratt <tbarratt@xxxxxxxxxxx> > Subject: Re: [Wireshark-users] How do I change the default capture filter > To: wireshark-users@xxxxxxxxxxxxx > Date: Friday, August 7, 2009, 3:28 AM > Interesting! > I would like to display filter on 200 known IPs, which if > not practical > in the GUI. > Could I put the filter into one of the dfiles found in the > filders tab? > Or is there perhaps a better way? > > Date: Thu, 6 Aug 2009 18:48:07 -0400 > > From: "Lori" <Verdandi@xxxxxxxxxxxxxxxxxx> > > Subject: Re: [Wireshark-users] How do I change the > default capture > > filter? > > To: "Community support list for Wireshark" > > <wireshark-users@xxxxxxxxxxxxx> > > Message-ID: > <1E7C8F8A6AFE46FBB41DEFD70A638145@Quad> > > Content-Type: text/plain; charset="iso-8859-1" > > > > How do I change the default capture filter?If you > click on Help | About Wireshark and go to the > Folders tab, it will show you the path for both Global and > Personal configurations. > > > > Hope this helps. > > > > Lori > > > > ----- Original Message ----- > > From: Bland, Alan > > To: wireshark-users@xxxxxxxxxxxxx > > > Sent: Thursday, August 06, 2009 2:10 > PM > > Subject: [Wireshark-users] How do I > change the default capture filter? > > > > > > At some time in the past I created a > filter and managed to set it as the default filter, because > every time I start Wireshark and start a capture that filter > is shown in the "capture filter" text box. > > > > This is a problem because I deleted > the filter, so it is not found. > > > > How do I remove this default setting. > > > > > To fix it I resorted to uninstalling > wire shark (1.0.7) and reinstalled it. The default > filter was the non-existent filter. > > > > I uninstalled wireshark and install > ethereal (0.99). The default filter was still the > non-existent filter. > > I uninstalled ethereal and installed > wireshark (2.0 the July 2009 release). The default > capture filter was still the non-existent filter. > > > > I scanned the registry for the name > of the filter. Not found. > > I searched the entire C: drive > looking for the filter by name. Not found. > > > > This is like a spirit from the other > side that has not found peace and cannot rest. > > > > Your help is needed. How do I > remove this setting? > > > > ___________________________________________________________________________ > Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx> > Archives: http://www.wireshark.org/lists/wireshark-users > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users > > mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe >
- References:
- Re: [Wireshark-users] How do I change the default capture filter
- From: Tony Barratt
- Re: [Wireshark-users] How do I change the default capture filter
- Prev by Date: Re: [Wireshark-users] CPU scalability to quad cores?
- Next by Date: Re: [Wireshark-users] VLAN Tags?
- Previous by thread: Re: [Wireshark-users] How do I change the default capture filter
- Next by thread: [Wireshark-users] CPU scalability to quad cores?
- Index(es):
- Get Wireshark
- Download
- Code of Conduct