What is the main difference between a capture filter and a display filter in Wireshark?
Capture filters are faster; display filters are slower
Capture filters are applied before/while capturing packets; display filters are applied after capture on saved data
Display filters change packet contents; capture filters do not
Display filters work only on live capture
This question is part of this quiz :
What is Network Traffic Analysis in Cybersecurity?