capture filter

Also written: filter, host, src, dst, net, port

An expression that tells tcpdump which packets to keep, such as `icmp and host 203.0.113.10`. You build it from words like host, net and port, joined with and, or and not.