Wireshark-users: Re: [Wireshark-users] Unicast-Capture
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Holger Posny <list@xxxxxxxxx>
Date: Wed, 19 Sep 2012 05:45:05 +0200
Oh Guy,

On 09/19/2012 02:17 AM, Guy Harris wrote:
>
> On Sep 18, 2012, at 4:59 PM, Holger Posny <list@xxxxxxxxx> wrote:
> 
>> Hi,
>> 
>> how I can capture unicat (without broadcast/multicast) in Wireshark
>> 1.8?
>> In 1.6 it was so easy:
>> 
>> Filter: not broadcast and not multicast
>> 
>> And now?
> 
> Same filter (it's implemented by libpcap/WinPcap, not Wireshark),
> the UI just makes it harder to set.
> 
> Open the Capture -> Options window and double-click on the interface on
> which you want to capture.  That should pop up a dialog for that
> interface that has a "Capture Filter" field.  Fill the filter in, and
> click "OK".  Make sure that interface is checked, update any other
> options you want to update, and click "Start".

this isn't hard. That's already tricky.
Thanks!