Use the Berkley Packet Filter (BPF) syntax to create capture filters through capture filter dialog.
BPF is a combination of two arguments: identifiers and qualifiers, which are explained as follows:
- Identifiers: Search criteria is your identifier. For example, capture filter like host 192.168.1.1, where the value 192.168.1.1 is an identifier.
- Qualifiers: These are categorized into further three sections:
- Type: There are three types of type qualifiers: host, port, and net. A type qualifier refers to the name or the number that your identifier refers to, e.g. in your capture filter host 192.168.1.1, host is the type qualifier.
- Direction: Sometimes, when you need to capture packets from a source or destination, specify ...
