Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

how can I let wireshark display only packets that are captured by a filter I don't want to have all packets, this takes a large memory space ?

share|improve this question

migrated from Mar 17 '13 at 11:48

This question came from our site for professional and enthusiast programmers.

Off topic for Stack Overflow, may belong on Super User. – Dukeling Mar 17 '13 at 10:50
up vote 0 down vote accepted

Under the menu group Capture, you can set a capture filter. Capture filters use the same syntax as tcpdump; the syntax is different from the syntax for capture filters.

share|improve this answer
@Guy Harris thanks for putting me straight on this. – grahamj42 Mar 17 '13 at 18:57
Thanks, here a tutorial about its syntax : – Nasreddine Mar 23 '13 at 6:03

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .