Oh Guy,
On 09/19/2012 02:17 AM, Guy Harris wrote:
>
> On Sep 18, 2012, at 4:59 PM, Holger Posny <list@xxxxxxxxx> wrote:
>
>> Hi,
>>
>> how I can capture unicat (without broadcast/multicast) in Wireshark
>> 1.8?
>> In 1.6 it was so easy:
>>
>> Filter: not broadcast and not multicast
>>
>> And now?
>
> Same filter (it's implemented by libpcap/WinPcap, not Wireshark),
> the UI just makes it harder to set.
>
> Open the Capture -> Options window and double-click on the interface on
> which you want to capture. That should pop up a dialog for that
> interface that has a "Capture Filter" field. Fill the filter in, and
> click "OK". Make sure that interface is checked, update any other
> options you want to update, and click "Start".
this isn't hard. That's already tricky.
Thanks!