Wireshark · Wireshark-users: Re: [Wireshark-users] Wireshark-users Digest, Vol 39, Issue 14

["Bland, Alan" <Alan.Bland@xxxxxxxxxxxx>]

Hi Lori,
 
First let me say that this may be a moot point.  I gave my PC to our IT group for some upgrades :).  they returned it with a fresh windows install :(.  Something went wrong, I may never get back to the condition that I reported.
 
Thanks for your help.
AB

________________________________

From: wireshark-users-bounces@xxxxxxxxxxxxx on behalf of wireshark-users-request@xxxxxxxxxxxxx
Sent: Sat 8/8/2009 2:00 PM
To: wireshark-users@xxxxxxxxxxxxx
Subject: Wireshark-users Digest, Vol 39, Issue 14



Send Wireshark-users mailing list submissions to
        wireshark-users@xxxxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
        https://wireshark.org/mailman/listinfo/wireshark-users
or, via email, send a message with subject or body 'help' to
        wireshark-users-request@xxxxxxxxxxxxx

You can reach the person managing the list at
        wireshark-users-owner@xxxxxxxxxxxxx

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Wireshark-users digest..."


Today's Topics:

   1. Trouble-shooting asp.net session-timeouts with    wireshark
      (mark kwon)
   2. Re: > How do I change the default capture filter? (Lori)


----------------------------------------------------------------------

Message: 1
Date: Sat, 8 Aug 2009 13:12:25 -0500
From: mark kwon <markjkwon@xxxxxxxxx>
Subject: [Wireshark-users] Trouble-shooting asp.net session-timeouts
        with    wireshark
To: wireshark-users@xxxxxxxxxxxxx
Message-ID:
        <c56660f90908081112w45956187x912ad07058b5c6d1@xxxxxxxxxxxxxx>
Content-Type: text/plain; charset="iso-8859-1"

Anyone here have any experience trying to troubleshoot asp.net session
timeouts with wireshark?

I'm looking for any and all tips on methodology.   Thanks!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.wireshark.org/lists/wireshark-users/attachments/20090808/271a1a4c/attachment.html

------------------------------

Message: 2
Date: Sat, 8 Aug 2009 14:53:35 -0400
From: "Lori" <Verdandi@xxxxxxxxxxxxxxxxxx>
Subject: Re: [Wireshark-users] > How do I change the default capture
        filter?
To: "Community support list for Wireshark"
        <wireshark-users@xxxxxxxxxxxxx>
Message-ID: <2EBD6CA91149489E9274CA6A05C960EF@Quad>
Content-Type: text/plain; format=flowed; charset="iso-8859-1";
        reply-type=original

Since this seems like something that is being 'remembered,' try to give it
something else to remember. ; )  Try going to the 'invalid' filter and Edit
it. Make it something that is valid.

It sounds to me like you're using the button on the toolbar to start the
capture - or using Capture | Start and using the 'default' options.
Double check :
Capture  | Capture Filters
Make sure all the ones you don't want are deleted.
Close Wireshark and open it back up.
Try a capture.

If that doesn't work, try creating a new configuration profile. Under Edit
| Configuration Profiles click New. Give it a name and use that instead of
the default.

Not sure how other people do this, but I always click Capture and then
Interfaces and go to Options. I make sure the Options I want are there and
then click Start from that screen to begin a capture. Never been one of
those who strives for fewer mouse clicks. YMMV. Another reason I always do
that is because I want to specifically name each capture and save it in a
particular folder.

I went digging through the Registry and the things I found didn't really
pertain to capture filters. I would think that setting would be in the file
you found - in the 'recent' file. And I'm wondering if what you're seeing is
in the filters drop-down list.  [Are you trying to clear that list?]

Something else that may give you more information -- try creating a new user
for that computer. See if it shows up under a different user or not. That
would probably tell you if what you're trying to accomplish is a global or
personal setting.

Just some guesses... hope it helps.





----- Original Message -----
From: "Bland, Alan" <Alan.Bland@xxxxxxxxxxxx>
To: <wireshark-users@xxxxxxxxxxxxx>
Sent: Saturday, August 08, 2009 12:03 PM
Subject: [Wireshark-users] > How do I change the default capture filter?


>
> Lori,
>
> Thanks for the advice.
>
> I found the string in the "recent" history file.  Removing is did not
> help.
> That file is generated when Wireshark is closed.  Wireshark is still
> starting up with the invalid capture filter.
>
> I went in and tried to set the defaul filter to one that exists, but
> wireshark started up with the invalid filter selected.
>
> Do you have any other ideas?



------------------------------

_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-users


End of Wireshark-users Digest, Vol 39, Issue 14
***********************************************

<<winmail.dat>>