4- CREATE A DISPLAY FILTER

Time Required: 15 minutes

Objective: Learn how to create a display filter in Wireshark. A display filter reduces the amount of information that Wireshark displays from a trace file.

Description: This project shows you how to create a filter in Wireshark that displays only IPv6-related traffic.

1.Follow the steps in Hands-On Project 1-2 to start the Wireshark program.

2.Click Analyze on the menu bar, and then click Display Filters. The Display Filters dialog box appears.

3.Click the plus button in the lower-left corner to create a new display filter.

4.Double-click in the Name field (on the left) and type IPv6 only.

5.Double-click in the Filter field (on the right) and enter ipv6 or icmpv6 or dhcpv6.

6.Click OK.The filter should appear in the Filter field in the main window. Wireshark checks the syntax of your filter. If the Filter field has a green background, the check of your filter was successful. If the check fails, the background will be red, which means you must correct your filters syntax.

7.Close Wireshark.