How can I export parts of a very large (2 hour) Wireshark capure?

Posted on 2011-10-07
Last Modified: 2012-05-12
I have an extremely large (2 hours) Wireshark capture, and I wish to export only the traffic from (2) of the devices that were talking on the network.  I have gotten the correct filter applied

(ETHERNET [all protocols] between IP and

And it displays the way that I want to export it....but I cannot figure out how to get it to export / save as / etc...with ONLY these filtered objects in the capture output.

Can anyone help?
Question by:jkeegan123
    LVL 5

    Accepted Solution

    I figured this out myself...after you have the filter applied, you have to go to FILE --> SAVE AS, and in the SAVE AS window, change the radio button from ALL PACKETS to SELECTED PACKETS.
    LVL 5

    Author Closing Comment

    I nailed it.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    Join & Write a Comment

    Almost all Internet protocol telephones have built-in switches at the back that allow you to connect your personal computer to one port and use the other port to connect your phone to to a Cisco switch.   Why we need to connect the PC to the pho…
    David Varnum recently wrote up his impressions of PRTG, based on a presentation by my colleague Christian at Tech Field Day at VMworld in Barcelona. Thanks David, for your detailed and honest evaluation!
    Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    745 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now