Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] Copying filters

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Guy Harris" <gharris@xxxxxxxxx>
Date: Tue, 26 Oct 2004 16:21:06 -0700 (PDT)
Kevin DeYoung said:
> Is there a way to copy both display and capture filters between systems
> which are using Ethereal so that they do not have to be re-entered
> manually?

I assume you mean "copy both the *saved* display filters and the *saved*
capture filters".

If so, then you need to copy the "cfilters" and "dfilters" files in the
Ethereal preference directory.  The Ethereal man page at

    http://www.ethereal.com/docs/man-pages/ethereal.1.html

says, when describing the "Save" button in the dialog boxes for editing
the capture filters and the display filters:

    Saves the current filter list in $HOME/.ethereal/cfilters on
UNIX-compatible systems, and %APPDATA%\Ethereal\cfilters (or, if
%APPDATA% isn't defined, %USERPROFILE%\Application
Data\Ethereal\cfilters) on Windows systems, if the list of filters
being edited is the list of capture filters, or in
$HOME/.ethereal/dfilters on UNIX-compatible systems, and
%APPDATA%\Ethereal\dfilters (or, if %APPDATA% isn't defined,
%USERPROFILE%\Application Data\Ethereal\dfilters) on Windows systems,
if the list of filters being edited is the list of display filters.

which says where the cfilters and dfilters files are located.