Hello,
I'm trying to get an understanding of what is actually being applied to the filter when using quick terms such as tcp.
E.g. if I filter "tcp", is it actually filtering ip.proto==0x06?
I am getting different packet counts for each of these filters and I would like to know if there is a document that contains this type of information for these quick reference type of filters.
Thank you for your help.