Network Analysis Using Wireshark 2 Cookbook - Second Edition
by Nagendra Kumar Nainar, Yoram Orzach, Yogesh Ramdoss
How it works...
The Wireshark - Capture Filters window enables you to configure filters according to Berkeley Packet Filter (BPF). After writing a filter string, you can click on the Compile BPF button, and the BPF compiler will check your syntax, and if it's wrong you will get an error message.
In addition to this, when you type a filter string in the capture filter textbox, if the filter string is correct, it will become green, and if not, it will become red.
The BPF filter only checks if the syntax is right. It does not check if the condition is correct. For example, if you type the string host without any parameters, you will get an error and the string will become red, but if you type host 192.168.1.1000 it will pass and the window will ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access