Wireshark mailing list archives

Re: Filter out a string using a display filter


From: Anthony Murabito <anthony () iol unh edu>
Date: Thu, 13 May 2010 12:11:46 -0400

Hi Panos,

wlan.fc.type_subtype != 0x04 && wlan.fc.type_subtype != 0x05

-Anthony


On 05/13/2010 12:05 PM, Panagiotis Georgopoulos wrote:

Hello all,

In my captures I see **a lot** of probe request and probe responses packets (IEEE 802.11 protocol) that make my debugging really difficult. How can I filter out all these packets using a display filter ?

I've tried creating a filter expression using e.g. the "probe request" string but it doesn't work.. It seems that I am unable to find the exact filed of 802.11 in the expressions list so I think I am looking to a filter more generic, such as "show me all the packets that do not contain the phrase "probe request" or "probe response" ". Any ideas?

                Thanks a lot,

                Panos


___________________________________________________________________________
Sent via:    Wireshark-users mailing list<wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
              mailto:wireshark-users-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: