Revision history [back]

Yes, capture filters have always used a different syntax from display filters. A brief explanation of capture filters can be found on this page on the Wireshark wiki.