Re: [Wireshark-users] how to filter a port?

2007-02-26 Thread Ulf Lamping
David Drexler wrote: It's either to or from 'http'. I also tried tcp.port != 80 same results. I want to run the capture realtime and only see the traffic that interests me. Your display filter falls under the A common mistake, try !(tcp.port == 80) instead, which is not the same. HTTP

Re: [Wireshark-users] how to filter a port?

2007-02-26 Thread Guy Harris
David Drexler wrote: It's either to or from 'http'. I also tried tcp.port != 80 same results. I want to run the capture realtime and only see the traffic that interests me. Then you'll need to find out what ports the traffic is going to or coming from - capture filters only work at

Re: [Wireshark-users] how to filter a port?

2007-02-26 Thread Small, James
To: Community support list for Wireshark Subject: Re: [Wireshark-users] how to filter a port? David Drexler wrote: It's either to or from 'http'. I also tried tcp.port != 80 same results. I want to run the capture realtime and only see the traffic that interests me. Your display

Re: [Wireshark-users] how to filter a port?

2007-02-25 Thread Jeff Morriss
David Drexler wrote: I'm running the latest wireshark and winpcap. I want to capture everything except http traffic. Seems like not port 80 would do it - but it doesn't, I still see lots of http. What am I doing wrong? That's a capture filter to eliminate things on TCP (and UDP)

Re: [Wireshark-users] how to filter a port?

2007-02-25 Thread David Drexler
It's either to or from 'http'. I also tried tcp.port != 80 same results. I want to run the capture realtime and only see the traffic that interests me. dd On 2/25/07, Jeff Morriss [EMAIL PROTECTED] wrote: David Drexler wrote: I'm running the latest wireshark and winpcap. I want to