Wireshark display ip subnet filter HD

Wireshark Display IP Subnet Filter When asked for advice on how to be a proficient protocol analyst, I give 2 pieces of advice; 1. Practice looking for patterns. In most cases, you are looking for patterns, or a break in the pattern. Don’t worry about memorizing the RFC’s or learning about every protocol. It is easier to focus on whatever protocol you are working on at that time. 2. Learn your display filters in whatever your protocol analyzer you use. The correct display filter will make the patterns jump out at you. I caution analysts about going capture filter crazy. Unless you know exactly what you are capturing, I typically try to leave the capture filter as ‘open’ as possible. My concern when troubleshooting is that due to the very nature of the unknowns when troubleshooting, you may inadvertently filter out valuable packets. .......... read the rest at http://www.networkcomputing.com/author-bio.asp?author_id=2332 when its posted