Wireshark-users: [Wireshark-users] Filter out a string using a display filter
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Panagiotis Georgopoulos" <panos@xxxxxxxxxxxxxxxx>
Date: Thu, 13 May 2010 17:05:53 +0100

Hello all,

 

                In my captures I see  *a lot* of probe request and probe responses packets (IEEE 802.11 protocol) that make my debugging really difficult. How can I filter out all these packets using a display filter ?

 

I’ve tried creating a filter _expression_ using e.g. the “probe request” string but it doesn’t work.. It seems that I am unable to find the exact filed of 802.11 in the expressions list so I think I am looking to a filter more generic, such as “show me all the packets that do not contain the phrase “probe request” or “probe response” “. Any ideas?

 

                Thanks a lot,

                Panos