Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] How do I change the default capture filter

From: Wes <wes_r@xxxxxxxxx>
Date: Fri, 7 Aug 2009 06:06:51 -0700 (PDT)
You might be able to use masks to help narrow it down. For example:

ip.addr==192.168.0.0/16

Wes

--- On Fri, 8/7/09, Tony Barratt <tbarratt@xxxxxxxxxxx> wrote:

> From: Tony Barratt <tbarratt@xxxxxxxxxxx>
> Subject: Re: [Wireshark-users] How do I change the default capture filter
> To: wireshark-users@xxxxxxxxxxxxx
> Date: Friday, August 7, 2009, 3:28 AM
> Interesting!
> I would like to display filter on 200 known IPs, which if
> not practical 
> in the GUI.
> Could I put the filter into one of the dfiles found in the
> filders tab?
> Or is there perhaps a better way?
> > Date: Thu, 6 Aug 2009 18:48:07 -0400
> > From: "Lori" <Verdandi@xxxxxxxxxxxxxxxxxx>
> > Subject: Re: [Wireshark-users] How do I change the
> default capture
> >     filter?
> > To: "Community support list for Wireshark"
> >     <wireshark-users@xxxxxxxxxxxxx>
> > Message-ID:
> <1E7C8F8A6AFE46FBB41DEFD70A638145@Quad>
> > Content-Type: text/plain; charset="iso-8859-1"
> >
> > How do I change the default capture filter?If you
> click on Help  |  About Wireshark and go to the
> Folders tab, it will show you the path for both Global and
> Personal configurations. 
> >
> > Hope this helps.
> >
> > Lori
> >
> >   ----- Original Message ----- 
> >   From: Bland, Alan 
> >   To: wireshark-users@xxxxxxxxxxxxx
> 
> >   Sent: Thursday, August 06, 2009 2:10
> PM
> >   Subject: [Wireshark-users] How do I
> change the default capture filter?
> >
> >
> >   At some time in the past I created a
> filter and managed to set it as the default filter, because
> every time I start Wireshark and start a capture that filter
> is shown in the "capture filter" text box.
> >
> >   This is a problem because I deleted
> the filter, so it is not found. 
> >
> >   How do I remove this default setting.
> 
> >
> >   To fix it I resorted to uninstalling
> wire shark (1.0.7) and reinstalled it.  The default
> filter was the non-existent filter.
> >
> >   I uninstalled wireshark and install
> ethereal (0.99).  The default filter was still the
> non-existent filter. 
> >   I uninstalled ethereal and installed
> wireshark (2.0 the July 2009 release).  The default
> capture filter was still the non-existent filter.
> >
> >   I scanned the registry for the name
> of the filter.  Not found. 
> >   I searched the entire C: drive
> looking for the filter by name.  Not found. 
> >
> >   This is like a spirit from the other
> side that has not found peace and cannot rest. 
> >
> >   Your help is needed.  How do I
> remove this setting? 
> >   
> 
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>          
>    mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>