Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Filter out a string using a display filter

From: Anthony Murabito <anthony@xxxxxxxxxxx>
Date: Thu, 13 May 2010 12:11:46 -0400
Hi Panos,

wlan.fc.type_subtype != 0x04 && wlan.fc.type_subtype != 0x05

-Anthony


On 05/13/2010 12:05 PM, Panagiotis Georgopoulos wrote:

Hello all,

 

                In my captures I see  *a lot* of probe request and probe responses packets (IEEE 802.11 protocol) that make my debugging really difficult. How can I filter out all these packets using a display filter ?

 

I’ve tried creating a filter _expression_ using e.g. the “probe request” string but it doesn’t work.. It seems that I am unable to find the exact filed of 802.11 in the expressions list so I think I am looking to a filter more generic, such as “show me all the packets that do not contain the phrase “probe request” or “probe response” “. Any ideas?

 

                Thanks a lot,

                Panos

___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe