Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

There are filters for capture and display.

The Berkeley Packet Filter format is used for the capture filters. It restricts which packets that are captured. Packets that match the filter are the only ones that are captured. If the capture filter is wrong, the capture needs to be repeated.

The display filters are in the Wireshark format. The packets that match the filter are shown. The file isn't changed by it.