The Wireshark Edit menu contains the fields shown in Table 3.3, “Edit menu items”.
Table 3.3. Edit menu items
Menu Item | Accelerator | Description |
---|---|---|
These menu items will copy the packet list, packet detail, or properties of the currently selected packet to the clipboard. | ||
Ctrl+F | This menu item brings up a toolbar that allows you to find a packet by many criteria. There is further information on finding packets in Section 6.8, “Finding Packets”. | |
Ctrl+N | This menu item tries to find the next packet matching the settings from “Find Packet…”. | |
Ctrl+B | This menu item tries to find the previous packet matching the settings from “Find Packet…”. | |
Ctrl+M | This menu item marks the currently selected packet. See Section 6.10, “Marking Packets” for details. | |
Ctrl+Shift+M | This menu item marks all displayed packets. | |
Ctrl+Alt+M | This menu item unmarks all displayed packets. | |
Ctrl+Shift+N | Find the next marked packet. | |
Ctrl+Shift+B | Find the previous marked packet. | |
Ctrl+D | This menu item marks the currently selected packet as ignored. See Section 6.11, “Ignoring Packets” for details. | |
Ctrl+Shift+D | This menu item marks all displayed packets as ignored. | |
Ctrl+Alt+D | This menu item unmarks all ignored packets. | |
Ctrl+T | This menu item set a time reference on the currently selected packet. See Section 6.12.1, “Packet Time Referencing” for more information about the time referenced packets. | |
Ctrl+Alt+T | This menu item removes all time references on the packets. | |
Ctrl+Alt+N | This menu item tries to find the next time referenced packet. | |
Ctrl+Alt+B | This menu item tries to find the previous time referenced packet. | |
Ctrl+Shift+T | Opens the “Time Shift” dialog, which allows you to adjust the timestamps of some or all packets. | |
Ctrl+Alt+C | Opens the “Packet Comment” dialog, which lets you add a comment to a single packet. Note that the ability to save packet comments depends on your file format. E.g. pcapng supports comments, pcap does not. | |
This will delete all comments from all packets. Note that the ability to save capture comments depends on your file format. E.g. pcapng supports comments, pcap does not. | ||
Ctrl+Shift+A | This menu item brings up a dialog box for handling configuration profiles. More detail is provided in Section 11.6, “Configuration Profiles”. | |
Ctrl+Shift+P or Cmd+, (macOS) | This menu item brings up a dialog box that allows you to set preferences for many parameters that control Wireshark. You can also save your preferences so Wireshark will use them the next time you start it. More detail is provided in Section 11.5, “Preferences”. |