Wireshark mailing list archives
Re: About filter "udp && !icmp"
From: Guy Harris <guy () alum mit edu>
Date: Tue, 16 Apr 2013 16:46:38 -0700
On Apr 16, 2013, at 3:59 PM, Christopher Maynard <Christopher.Maynard () gtech com> wrote:
To isolate only the UDP packets from the capture files you might already have, you will first need to apply a display filter of "udp && !icmp" as you've done, then export only those displayed packets to a new capture file using "File -> Export Specified Packets -> ...". After that, you can load the newly created capture file containing only the UDP packets and finally 'File -> Export Packet Dissections -> as "Plain Text" file...'.
Or you can, in "File -> Export Packet Dissections -> as "Plain Text"", specify that only the dissections of the displayed packets should be exported. ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- About filter "udp && !icmp" delarge (Apr 16)
- Re: About filter "udp && !icmp" Guy Harris (Apr 16)
- Re: About filter Christopher Maynard (Apr 16)
- Re: About filter "udp && !icmp" Guy Harris (Apr 16)
- Re: About filter "udp && !icmp" Christopher Maynard (Apr 16)
- Re: About filter "udp && !icmp" delarge (Apr 17)
- Re: About filter Christopher Maynard (Apr 16)
- Re: About filter "udp && !icmp" Guy Harris (Apr 16)