All the information that has been provided in the cheat sheet is also visible further down this page in a format that is easy to copy and paste.

View or Download the Cheat Sheet JPG image

Right-click on the image below to save the JPG file ( 2500 width x 2096 height in pixels), or click here to open it in a new browser tab. Once the image opens in a new window, you may need to click on the image to zoom in and view the full-sized jpeg.

The cheat sheet covers:

  • Wireshark Capturing Modes
  • Filter Types
  • Capture Filter Syntax
  • Display Filter Syntax
  • Protocols – Values
  • Filtering packets (Display Filters)
  • Logical Operators
  • Default columns in a packet capture output
  • Miscellaneous Items
  • Keyboard Shortcuts
  • Common Filtering Commands
  • Main Toolbar Items

View or Download the cheat sheet JPG image

Click on the link to download the Cheat Sheet PDF. If it opens in a new browser tab, simply right click on the PDF and navigate to the download selection.

What’s included in the Wireshark cheat sheet?

The following categories and items have been included in the cheat sheet:

Wireshark Capturing Modes

Filter Types

Capture Filter Syntax

Display Filter Syntax

Protocols – Values

Filtering packets (Display Filters)

Miscellaneous Items

Logical Operators

Default columns in a packet capture output

Keyboard Shortcuts

Common Filtering Commands

Main Toolbar Items

tcp.flags.syn == 1 and tcp.flags.ack == 0

More Wireshark tutorials:

  • Wireshark cheat sheet
  • How to decrypt SSL with Wireshark
  • Using Wireshark to get the IP address of an Unknown Host
  • Running a remote capture with Wireshark and tcpdump
  • Wireshark ‘no interfaces found’ error explained
  • Identify hardware with OUI lookup in Wireshark
  • Best Wireshark alternatives

If you don’t see the Home page, click on Capture on the menu bar and then select Options from that drop-down menu. You will see a list of available interfaces and the capture filter field towards the bottom of the screen. Select an interface by clicking on it, enter the filter text, and then click on the Start button.