What is the main difference between a capture filter and a display filter in Wireshark?

Last Updated :
Discuss
Comments

What is the main difference between a capture filter and a display filter in Wireshark?

Capture filters are faster; display filters are slower

Capture filters are applied before/while capturing packets; display filters are applied after capture on saved data

Display filters change packet contents; capture filters do not

Display filters work only on live capture

Share your thoughts in the comments