From the course: Wireshark: Malware and Forensics

Unlock the full course today

Join today to access over 22,500 courses taught by industry experts or purchase this course individually.

Creating complex filters

Creating complex filters - Wireshark Tutorial

From the course: Wireshark: Malware and Forensics

Start my 1-month free trial

Creating complex filters

“

- [Instructor] Now, once you're comfortable with display filters you might want to create a more complex expression. And we can do that with the Expression Builder. And I'm here at this website where you can see some information about building display filter expressions. And it tells us about how we can control exactly which packets are displayed. Now, I also have to show you this wiki here, and it talks about display filters, and we'll just select this one for example. It allows you to have granular control over exactly what packets are going to be showing up in your display. So now how do we get to that? So we took a look at some simple display filters, but what if we want to build a more complex expression? When you go up here into expression we'll allow this to open and give it a second. This gives you all the possible field values that Wiresharks dissectors can present to you. And we can go in and refine this by…

Contents