It's either to or from 'http'. I also tried
tcp.port != 80
same results. I want to run the capture realtime and only see the traffic that interests me.
dd
On 2/25/07, Jeff Morriss <jeff.morriss@xxxxxxxxxxx> wrote:
David Drexler wrote:
> I'm running the latest wireshark and winpcap. I want to capture
> everything except http traffic. Seems like
>
> not port 80
>
> would do it - but it doesn't, I still see lots of http. What am I doing
> wrong?
That's a capture filter to eliminate things on TCP (and UDP) port 80.
Is the HTTP traffic you're seeing on a different port?
If so, you could try a display filter (applied after the capture is
done) like "!http".
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users
