There’s no new science here – just stuff that I’m putting here because I forget where I put digital things – so – I’ll keep a record here to help me – and maybe someone else in the future… I’ll just pop them in here from time to time.
Thinning out the results on capture is preferred sometimes:
I use this to block out my camera data on captures:
not broadcast and not multicast and (not port 9000)
And another useful one:
not host 192.168.* (for example) just add that subnet and leave off the last octet.