Open In App

Process to Ignore Packets in Wireshark

Last Updated : 22 Oct, 2022
Improve
Improve
Like Article
Like
Save
Share
Report

In Wireshark, we can ignore captured packets in the “Packet List” pane if some packets are unnecessary. Wireshark will ignore them as if they do not exist in the capture file. The packets which are ignored are displayed with white background and gray foreground, even if they have pre-defined coloring rules already set. When we ignore a packet, its entry disappears from the Packet List, Packet Details, and Packet Bytes. No information is saved in the capture file. They are lost when the capture file is closed.

Ignore/Unignore Packets in Wireshark:

To ignore and unignore packets in Wireshark, follow the below steps:

  • Start the Wireshark by selecting the network we want to analyze or opening any previously saved captured file.
  • Select one or more packets you want to be ignored by Wireshark.
  • Now click on Edit → Ignore/Unignore Packet option. It toggles the ignored state of a single packet. 
Wireshark Edit Menu

 

The Ignored packet will be displayed in Wireshark like this:

Wireshark Ignored Packets

 

To unignore all the ignored packets, click on Edit → Unignore All Displayed to reset the ignored state of all packets. The “Ignore All Displayed” sets the ignored state of all displayed packets.


Like Article
Suggest improvement
Share your thoughts in the comments

Similar Reads