Filter Builder

Build Wireshark display filters interactively. Select protocol, field, operator, and value — then generate the filter string.

Info

This tool generates display filter syntax, not BPF capture filter syntax. Display filters work on already-captured data in the Wireshark GUI or tshark -Y.

Quick Presets

Build Your Filter

.

How to Use This Filter

  1. 1.Copy the generated filter string above.
  2. 2.In Wireshark, paste it into the display filter bar at the top of the packet list.
  3. 3.Or use it with tshark: tshark -r capture.pcap -Y "your_filter_here"
Next: Advanced Features Back