Skip to content

Glossary: Security Monitoring and Automation

display filter

Also written: display filters, tshark -Y

A filter used while reading a capture in Wireshark or tshark (`-Y`). It hides packets that don't match and can name decoded fields such as `http.request.method == "POST"`.

Where the book teaches it

Related terms

capture filtertsharkWireshark