Wireshark-users: Re: [Wireshark-users] About filter "udp && !icmp"
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 16 Apr 2013 16:46:38 -0700
On Apr 16, 2013, at 3:59 PM, Christopher Maynard <Christopher.Maynard@xxxxxxxxx> wrote:

> To isolate only the UDP packets from the capture files you might already
> have, you will first need to apply a display filter of "udp && !icmp" as
> you've done, then export only those displayed packets to a new capture file
> using "File -> Export Specified Packets -> ...".  After that, you can load
> the newly created capture file containing only the UDP packets and finally
> 'File -> Export Packet Dissections -> as "Plain Text" file...'.

Or you can, in "File -> Export Packet Dissections -> as "Plain Text"", specify that only the dissections of the displayed packets should be exported.