There are basically two types of filters in Wireshark: Capture Filter and Display Filter. So you need to learn some fancy syntax and rules for applying these filters. Wireshark does not understand the straightforward sentences “ filter out the TCP traffic” or “ Show me the traffic from destination X”. if you want to see only the TCP traffic or packets from a specific IP address, you need to apply the proper filters in the filter bar. Wireshark filters are all about simplifying your packet search.

In this guide, we are going to explore how to create and efficiently apply filters in Wireshark. Using the filters you can see exactly the type of traffic you want and everything else will be removed from the scene. It will be very cumbersome to inspect this traffic without the knowledge of Wiresharks’s filter functionalities. If you are working in a production environment, you are going to get a lot of traffic. With Wireshark one can see what is going on their network: You can see from where the traffic is coming in and where it is going to. Wireshark (Formerly Ethereal) is used for capturing and investigating the traffic on a network. Wireshark is a Free and Open Source Software (FOSS) and it is developed by a community of enthusiastic developers.

Wireshark display filter multiple