As of version 1.10, Wireshark supports around 1000 protocols and nearly 141000 protocol fields, and you can create filter expressions using any of them.
Because of this, they are a lot more powerful.
These are different than capture filters, because they leverage the protocol dissectors these tools use to capture information about individual protocol fields. Wireshark and tshark both provide the ability to use display filters.
Chris Sanders, Jason Smith, in Applied Network Security Monitoring, 2014 Wireshark Display Filters
0 kommentar(er)
