Configuring display filters

In order to configure display filters, you can choose one of several options:

• Choosing from the filters menus.
• Writing the syntax directly into the filter window (after working with Wireshark for a while, this will become your favorite).
• Picking a parameter in the packet pane and defining it as a filter.
• With the command line, using tshark or wireshark. This will be discussed in the appendix.

This chapter discusses the first three options.