Wireshark-users: Re: [Wireshark-users] Active filter
From: sean bzd <seanbzd@xxxxxxxxx>
Date: Tue, 8 Sep 2009 15:01:52 -0400
I suppose you mean Display filter. Display filters work online(while capture is going on) and offline. Its syntax is different from capture filters. What does WIKI say about the syntax?
On Tue, Sep 8, 2009 at 2:51 PM, Christopher Wooley <support@xxxxxxxxxxxxxxxxxxxx> wrote:
figured it out. I searched through the expressions list, until I found it. Does the WIKI need to be updated?
From: Christopher Wooley [mailto:support@xxxxxxxxxxxxxxxxxxxx]
To: wireshark-users@xxxxxxxxxxxxx
Sent: Tue, 08 Sep 2009 13:44:24 -0500
Subject: [Wireshark-users] Active filter
I am trying to filter an active capture for port 3250, but when I use "tcp port 3250" in the filter I get "port was unexpected in this context" What's the correct way to do this?
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
- Follow-Ups:
- Re: [Wireshark-users] Active filter
- From: Savina Alla
- Re: [Wireshark-users] Active filter
- References:
- Re: [Wireshark-users] Active filter
- From: Christopher Wooley
- Re: [Wireshark-users] Active filter
- Prev by Date: [Wireshark-users] problems with nested protocols in tshark
- Next by Date: Re: [Wireshark-users] Active filter
- Previous by thread: Re: [Wireshark-users] How widespread is sniffer talent?
- Next by thread: Re: [Wireshark-users] Active filter
- Index(es):