What does the 'Display Filter Macros' feature let you do?

• A. Create and save display filter macros for reuse
• B. Browse endpoint statistics
• C. Show three-way handshake
• D. Apply as Filter

Answer: (A)

Display Filter Macros are about creating and saving named filter expressions so you can reuse them later. You define a macro with a name and a filter expression, and then you can insert that macro into any display filter (often by using a symbol like $macroName). This makes your filters more readable and easier to manage, especially on large captures, because you can update one macro and have the change reflected wherever it’s used. For example, you might create a macro named HTTP_CLIENT that represents a common filter for HTTP traffic from a specific host, and then reuse $HTTP_CLIENT in different filters.

This feature is not about browsing endpoint statistics, showing the three-way handshake, or simply applying the current filter as-is. Those functions serve different purposes, while Display Filter Macros focus on saving and reusing filter expressions for consistency and efficiency.