First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Capture filter doesn't accept expression for Display filter

  • retag add tags

This is a very basic question but my Wireshark 2.6.2 does not accept same filter expression as capture filter and as display filter. "ip.addr==192.168.10.100" is valid for display filter (the background turns green) but not for capture filter (it turns red). Was this so from the version 1.x?

tsuru's avatar
1
tsuru
asked 2018-07-27 16:52:14 +0000
grahamb's avatar
23.8k
grahamb
updated 2018-07-27 23:00:41 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

1

Yes, capture filters have always used a different syntax from display filters. A brief explanation of capture filters can be found on this page on the Wireshark wiki.

Jim Aragon's avatar
7.5k
Jim Aragon
answered 2018-07-27 17:02:37 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer