Basic but possibly not-immediately-intuitive Wireshark display filters, that are good to know about.


!(eth.addr == 01:02:03:04:05:06)        [display_filter; substitute your NIC's local MAC addr]
not ether host 01:02:03:04:05:06        [capture_filter]
    Show only broadcast data (when attached to a switch).



not broadcast and not multicast     [capture_filter]
    Show *no* broadcast data.

    

!(tcp.port == 24800)        [display_filter]
not tcp port 24800          [capture_filter]
    Ignore Synergy/mouse data