[Jeff Morriss <jeff.morriss@xxxxxxxxxxx>]

David Drexler wrote:
> I'm running the latest wireshark and winpcap.  I want to capture 
> everything except http traffic.  Seems like
>
> not port 80
>
> would do it - but it doesn't, I still see lots of http.  What am I doing 
> wrong?

That's a capture filter to eliminate things on TCP (and UDP) port 80. 
Is the HTTP traffic you're seeing on a different port?

If so, you could try a display filter (applied after the capture is 
done) like "!http".