Wireshark-users: Re: [Wireshark-users] Why is default filter 'not tcp port 3389' ?
From: "Jee Kay" <jeekay+wireshark@xxxxxxxxx>
Date: Sat, 26 Aug 2006 18:07:25 +0100
On 26/08/06, Ben Stover <bxstover@xxxxxxxxxxx> wrote:
After the installation of WireShark the default Capture filter is set to
'not tcp port 3389'
Why ?

Because you're connecting to the machine via RDP.