3.6. The “Edit” Menu

The Wireshark Edit menu contains the fields shown in Table 3.3, “Edit menu items”.

Figure 3.4. The “Edit” Menu

ws edit menu

Table 3.3. Edit menu items

Menu ItemAcceleratorDescription

Copy

 

These menu items will copy the packet list, packet detail, or properties of the currently selected packet to the clipboard.

Find Packet…​

Ctrl+F

This menu item brings up a toolbar that allows you to find a packet by many criteria. There is further information on finding packets in Section 6.8, “Finding Packets”.

Find Next

Ctrl+N

This menu item tries to find the next packet matching the settings from “Find Packet…​”.

Find Previous

Ctrl+B

This menu item tries to find the previous packet matching the settings from “Find Packet…​”.

Mark/Unmark Selected

Ctrl+M

This menu item marks the currently selected packet. See Section 6.10, “Marking Packets” for details.

Mark All Displayed Packets

Ctrl+Shift+M

This menu item marks all displayed packets.

Unmark All Displayed Packets

Ctrl+Alt+M

This menu item unmarks all displayed packets.

Next Mark

Ctrl+Shift+N

Find the next marked packet.

Previous Mark

Ctrl+Shift+B

Find the previous marked packet.

Ignore/Unignore Selected

Ctrl+D

This menu item marks the currently selected packet as ignored. See Section 6.11, “Ignoring Packets” for details.

Ignore All Displayed

Ctrl+Shift+D

This menu item marks all displayed packets as ignored.

Unignore All Displayed

Ctrl+Alt+D

This menu item unmarks all ignored packets.

Set/Unset Time Reference

Ctrl+T

This menu item set a time reference on the currently selected packet. See Section 6.12.1, “Packet Time Referencing” for more information about the time referenced packets.

Unset All Time References

Ctrl+Alt+T

This menu item removes all time references on the packets.

Next Time Reference

Ctrl+Alt+N

This menu item tries to find the next time referenced packet.

Previous Time Reference

Ctrl+Alt+B

This menu item tries to find the previous time referenced packet.

Time Shift…​

Ctrl+Shift+T

Opens the “Time Shift” dialog, which allows you to adjust the timestamps of some or all packets.

Packet Comment…​

Ctrl+Alt+C

Opens the “Packet Comment” dialog, which lets you add a comment to a single packet. Note that the ability to save packet comments depends on your file format. E.g., pcapng supports comments, pcap does not.

Delete All Packet Comments

 

This will delete all comments from all packets. Note that the ability to save capture comments depends on your file format. E.g., pcapng supports comments, pcap does not.

Inject TLS Secrets

 

Embeds the used TLS decryption secrets into the capture file, which lets TLS be decrypted without having the separate keylog file. Note that the ability to save decryption secrets depends on your file format. E.g., pcapng supports Decryption Secrets Blocks, pcap does not.

Discard All Secrets

 

This will discard all embedded decryption secrets from the capture file. Note that the ability to save decryption secrets depends on your file format. E.g., pcapng supports Decryption Secrets Blocks, pcap does not.

Configuration Profiles…​

Ctrl+Shift+A

This menu item brings up a dialog box for handling configuration profiles. More detail is provided in Section 11.6, “Configuration Profiles”.

Preferences…​

Ctrl+Shift+P or Cmd+, (macOS)

This menu item brings up a dialog box that allows you to set preferences for many parameters that control Wireshark. You can also save your preferences so Wireshark will use them the next time you start it. More detail is provided in Section 11.5, “Preferences”.