Wireshark User's Guide: Filtering while capturing

Publisher

Wireshark Foundation

URL

https://www.wireshark.org/docs/wsug_html_chunked/ChCapCaptureFilterSection.html

Published

unknown

Updated

unknown

Accessed

2026-09-24

HTTP status

200

License

Wireshark documentation; licence terms not verified; no-redistribution; short excerpts and locators only

Source notes citing this source

• Wireshark capture filter primitives include 'host <ip>' (source or destination), '[src|dst] host <ip>' and '[tcp|udp] [src|dst] port <port>', combined with and, or and not. in context
• Wireshark capture filters are written in the libpcap filter language and limit which packets are captured, unlike display filters applied afterwards. in context

Cite this source record

APA

WarmTransfer. (2026, September 24). Wireshark User's Guide: Filtering while capturing. WarmTransfer. https://warmtransfer.net/knowledge/sources/wireshark-wsug-capture-filters

BibTeX

@misc{warmtransfer-wireshark-wsug-capture-filters,
  title  = {Wireshark User's Guide: Filtering while capturing},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/wireshark-wsug-capture-filters},
  note   = {Wireshark Foundation, accessed 2026-09-24}
}