Wireshark

DisplayFilters Wireshark uses display filters for general packet filtering while viewing and for its ColoringRules. The basics and the syntax of the display filters are described in the User’s Guide. The master list of display filter protocol fields can be found in the display filter reference. If you need a display filter for a specific protocol, have a look for it at the ProtocolReference. Examples Show only SMTP (port 25) and ICMP traffic: tcp.port eq…