Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] Not able to apply diaplay filter for Gnutella

From: Jeff Morriss <jeff.morriss@xxxxxxxxxxx>
Date: Wed, 25 Apr 2007 10:45:05 +0800


S H wrote:
Hi,
I am testing display filter for P2P protocol. I captured network packet, which has Gnutella packets. I want to apply display filter for Gnutella and identify Gnutella. I can test bittorrent P2P application by "bittorrent" name in the display filter field, it does work. I am not able to test Gnutella, or any other protocol by using display filter as "Gnutella". Does anybody knows how to apply display filter for Gnutella or any other P2P protocol. Any help would be appreciated.

Do you see Gnutella packets and just can't filter for them?

Did you try "gnutella" (note the lower case "g")?

Else you might want to try changing the port number used by the Gnutella dissector (Edit->Preferences->Protocols->Gnutella).