Re: Display filter help need. how to do these filters? DNS /L2 overhead

[Guy Harris <guy () alum mit edu>]

On Feb 20, 2014, at 2:10 PM, false <jctx09 () yahoo com> wrote:

> Can someone provide an example please on how to do these filters (display and/or capture)?

        ...

> 2) L2 Overhead - Can I get filter out all L2 overhead to see what the total amount of data sent was with and without 
> L2 overhead. ??

That's a different type of "filter" from a capture or display filter.  Capture or display filters either match or don't 
match a packet, and filter out entire packets that don't match.  You want a way to filter out part of all packets; 
Wireshark doesn't have a convenient mechanism to do that.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe