It's either to or from 'http'. I also tried tcp.port != 80
same results. I want to run the capture realtime and only see the traffic that interests me. dd On 2/25/07, Jeff Morriss <[EMAIL PROTECTED]> wrote:
David Drexler wrote: > I'm running the latest wireshark and winpcap. I want to capture > everything except http traffic. Seems like > > not port 80 > > would do it - but it doesn't, I still see lots of http. What am I doing > wrong? That's a capture filter to eliminate things on TCP (and UDP) port 80. Is the HTTP traffic you're seeing on a different port? If so, you could try a display filter (applied after the capture is done) like "!http". _______________________________________________ Wireshark-users mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-users
_______________________________________________ Wireshark-users mailing list [email protected] http://www.wireshark.org/mailman/listinfo/wireshark-users
