 | 1 | initial version |
Display filters only include or exclude a packet on the contents of that packet, they can't reference other packets.
If the dissection process has added synthetic fields such that there are forward\reverse links between packets, then they can be used in filters, e.g. http request\response.
Unfortunately that hasn't been done (yet) for TLS Client\Server Hello messages but you can raise an enhancement request on the Wireshark GitLab issues page.
