Wireshark · Wireshark-dev: Re: [Wireshark-dev] Not able to apply diaplay filter for Gnutella

[Jeff Morriss <jeff.morriss@xxxxxxxxxxx>]

S H wrote:
> Hi,
> I am testing display filter for P2P protocol.  I captured network 
> packet, which has Gnutella packets. I want to apply display filter for 
> Gnutella and identify Gnutella.  I can test bittorrent P2P application 
> by "bittorrent" name in the display filter field, it does work. I am not 
> able to test Gnutella, or any other protocol by using display filter as 
> "Gnutella". Does anybody knows how to apply display filter for Gnutella 
> or any other P2P protocol. Any help would be appreciated.

Do you see Gnutella packets and just can't filter for them?

Did you try "gnutella" (note the lower case "g")?

Else you might want to try changing the port number used by the Gnutella 
dissector (Edit->Preferences->Protocols->Gnutella).