3 ms·Wireshark's display filters are much nicer than tcpdump's BPF; a much simpler language definition.by tehwalrus 10y agoWireshark's display filters are much nicer than tcpdump's BPF; a much simpler language definition.