Skip to content
Ron Hashimoto edited this page Aug 7, 2016 · 6 revisions

Display Filter

You can hide unneeded frames using a Display Filter.
Display Filter is similar to the JavaScript expression. See Display-Filter-Syntax.

Note: A complicated display filter may have a bad impact on capturing performance.

display-filter

Capturing Filter

Capturing Filter is useful for discarding unneeded frames and reducing CPU usage.

This function is provided not by Dripcap but by libpcap and it accepts only BPF (Berkeley Packet Filter) Syntax.
Please see http://biot.com/capstats/bpf.html for the details.

Note: Unlike Display Filter, you can not retrieve discarded frames after the filtering.

capturing-filter

Clone this wiki locally