In order to configure display filters, you can choose one of the several options:
wiresharkwith command line ; this will be discussed in Appendix
This chapter discusses the first three options.
In general, a display filter string takes the form of a series of primitive expressions connected by conjunctions (and, or, or something else) and optionally preceded by
[not] Expression [and|or] [not] Expression...
Expression can be any filter expression, such ...