Which element do you use to quickly filter displayed packets by entering a condition?

• A. Main Toolbar
• B. Filter Toolbar
• C. Status Bar
• D. Packet Bytes Pane

Answer: (A)

To filter displayed packets quickly, use the Filter Toolbar. This area includes the Display Filter field where you type a filter expression (for example, ip.addr == 192.168.1.1 or tcp.port == 80). Entering a condition and pressing Enter updates the packet list to show only packets that match that expression, making it easy to focus on what you need. It’s different from capture filters, which limit what is captured in real time; the Filter Toolbar targets what’s already captured and displayed.

The Main Toolbar, in contrast, houses overall actions like starting or stopping a capture, opening or saving files, and other global controls, not the filtering of the displayed data. The Status Bar shows status information and counts, not filtering logic. The Packet Bytes Pane displays the contents of the currently selected packet, not the filtering mechanism itself. So for quickly narrowing down packets by a condition, the Filter Toolbar is the right tool.