Wireshark-users: Re: [Wireshark-users] Filter out a string using a display filter
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Anthony Murabito <anthony@xxxxxxxxxxx>
Date: Thu, 13 May 2010 12:11:46 -0400
Hi Panos,

wlan.fc.type_subtype != 0x04 && wlan.fc.type_subtype != 0x05

-Anthony


On 05/13/2010 12:05 PM, Panagiotis Georgopoulos wrote:

Hello all,

 

                In my captures I see  *a lot* of probe request and probe responses packets (IEEE 802.11 protocol) that make my debugging really difficult. How can I filter out all these packets using a display filter ?

 

I’ve tried creating a filter _expression_ using e.g. the “probe request” string but it doesn’t work.. It seems that I am unable to find the exact filed of 802.11 in the expressions list so I think I am looking to a filter more generic, such as “show me all the packets that do not contain the phrase “probe request” or “probe response” “. Any ideas?

 

                Thanks a lot,

                Panos


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe