> For the complete documentation index, see [llms.txt](https://notes.m4lwhere.org/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.m4lwhere.org/defensive/network-forensics/wireshark-filters.md).

# Wireshark Filters

Filters can be used by wireshark to limit the amount of items identified in a capture. Filters are displayed with comparison operators 

| Operator   | Comparison                   |
| ---------- | ---------------------------- |
| `==`       | equals                       |
| `!=`       | not equal                    |
| `>`        | greater than                 |
| `<`        | less than                    |
| `>=`       | greater than or equal        |
| `<=`       | less than or equal           |
| `contains` | value is inside of the field |
| `matches`  | regex matching for a field   |
| `&&`       | and                          |
| `\|\|`     | or                           |
| `!`        | not                          |