Capture filters

Capture filters enable you to capture only traffic that you want to be captured, eliminating an unwanted stream of packets. Capturing packets is a processor-intensive task, and packet analyzers use a good amount of primary memory while they are running.

Packets are only sent to the capture engine if they meet a certain criterion (capture filter expressions). Capture filters do not facilitate advanced filtering options, as in display filters.

The following is a screenshot of the Capture Options window dialog:

The Capture Options dialog

Let's take a walk through the options available in the Capture dialog window:

  • Capture (under ...

Get Wireshark 2 Quick Start Guide now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.