[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-users
Subject:    Re: [Wireshark-users] Default filter
From:       Jeff Morriss <jeff.morriss.ws () gmail ! com>
Date:       2016-06-27 2:25:17
Message-ID: CAKkq+FZ7BoNH9Htc1S1GRMqRwXnLY-pUFMUq5efVqLKy=cb9GQ () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


On Fri, Jun 24, 2016 at 5:28 PM, Rudy Zijlstra <
rudy@grumpydevil.homelinux.org> wrote:

> Hi
>
> I am usually using wireshark remotely. This means that it will set a
> default filter to prevent sniffing the remote traffic it generates itself.
>
> For me, this is not needed, as i always set filters to limit the traffic
> to what i need to see. If the default filter would be set only at startup,
> it would not be a problem, but what makes it rather irritating is that each
> time i want to modify the filter, it removes the filter i had set and
> replaces it with the default filter.
>
> How can i disable this behavior? This is on wireshark 1.12.1
>

I don't think you can disable it.  It sounds like you're running into a
longstanding bug report:

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9115

You might want to add yourself to the Cc: list for that bug so you'll be
notified whenever any progress is made on it.

[Attachment #5 (text/html)]

<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jun \
24, 2016 at 5:28 PM, Rudy Zijlstra <span dir="ltr">&lt;<a \
href="mailto:rudy@grumpydevil.homelinux.org" \
target="_blank">rudy@grumpydevil.homelinux.org</a>&gt;</span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid \
rgb(204,204,204);padding-left:1ex">Hi<br> <br>
I am usually using wireshark remotely. This means that it will set a default filter \
to prevent sniffing the remote traffic it generates itself.<br> <br>
For me, this is not needed, as i always set filters to limit the traffic to what i \
need to see. If the default filter would be set only at startup, it would not be a \
problem, but what makes it rather irritating is that each time i want to modify the \
filter, it removes the filter i had set and replaces it with the default filter.<br> \
<br> How can i disable this behavior? This is on wireshark \
1.12.1<br></blockquote><div><br></div><div>I don&#39;t think you can disable it.   It \
sounds like you&#39;re running into a longstanding bug report:<br><br><a \
href="https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9115">https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9115</a><br><br></div><div>You \
might want to add yourself to the Cc: list for that bug so you&#39;ll be notified \
whenever any progress is made on it.<br></div></div></div></div>



___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@wireshark.org?subject=unsubscribe

[prev in list] [next in list] [prev in thread] [next in thread]