Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Filter out a string using a display filter

From: "Panagiotis Georgopoulos" <panos@xxxxxxxxxxxxxxxx>
Date: Thu, 13 May 2010 17:05:53 +0100

Hello all,

 

                In my captures I see  *a lot* of probe request and probe responses packets (IEEE 802.11 protocol) that make my debugging really difficult. How can I filter out all these packets using a display filter ?

 

I’ve tried creating a filter _expression_ using e.g. the “probe request” string but it doesn’t work.. It seems that I am unable to find the exact filed of 802.11 in the expressions list so I think I am looking to a filter more generic, such as “show me all the packets that do not contain the phrase “probe request” or “probe response” “. Any ideas?

 

                Thanks a lot,

                Panos