Which one of the best following is an advantage of using display filters instead of capture-time filters?
A . Display filters allow for focused analysis on just the packets of interest
B . Once created display filters are reusable for later captures
C . Display filters only hide the packets from view and the filtered packets can be enabled for view later
D . Multiple display filters can be applied simultaneously
Answer: A
Explanation:
display filters allow you to focus on things of interest and to ignore things you don’t care about.
Reference: https://searchnetworking.techtarget.com/tip/How-to-manage-Wireshark-display-filters