Does anyone know how to remove previous remote interfaces from appearing? Every time I start a new capture for an access point, I have to cycle through all the previous ones I have completed. I have found in the personal configuration folder a file recent_common and it has all the previous remote Ip's, I tried to delete and save but they all come back. Any ideas?
Thanks
Does anyone know how to remove previous remote interfaces from appearing?
At least in Wireshark 3.2 and later (and possibly earlier), if you go to Capture > Options, show the "Input" tab, click on "Manage Interfaces...", and show the "Remote" tab, you can select a host in the list of remote interfaces and remove it by clicking the "-" button below the list, just as you can add hosts to the list by clicking the "+" button and filling in the parameters in the dialog that pops up.
(I.e., you don't have to edit the recent_common file; you can remove remote capture hosts from the GUI.)
Header in recent_common:
# Common recent settings file for Wireshark 3.4.4. # # This file is regenerated each time Wireshark is quit # and when changing configuration profile. # So be careful, if you want to make manual changes here
Have you closed all instances of Wireshark before modifying the file?
(Similar question: Disable rpcap-interface discovery on startup)
Hi Thanks that was what I was missing! :-) I kept Wireshark open.
Comments