Mark/unmark a packet.

Set/reset a time reference.

Prepare and apply a display filter based on the currently selected item.

Prepare a display filter based on the currently selected item.

This menu item applies a display filter with the address information from the selected packet. E.g. the IP menu entry will set a filter to show the traffic between the two IP addresses of the current packet. XXX - add a new section describing this better.

This menu item uses a display filter with the address information from the selected packet to build a new colorizing rule.

XXX - add an explanation of this.

Allows you to view all the data on a TCP stream between a pair of nodes.

Same as "Follow TCP Stream" but for SSL. XXX - add a new section describing this better.

Copy the summary fields as displayed to the clipboard, as tab-separated text.

Copy the summary fields as displayed to the clipboard, as comma-separated text.

Prepare a display filter based on the currently selected item and copy that filter to the clipboard.

Copy the packet bytes to the clipboard in hexdump-like format.

Copy the packet bytes to the clipboard in hexdump-like format, but without the text portion.

Copy the packet bytes to the clipboard as ASCII text, excluding non-printable characters.

Copy the packet bytes to the clipboard as an unpunctuated list of hex digits.

Copy the packet bytes to the clipboard as raw binary. The data is stored in the clipboard as MIME-type "application/octet-stream".

This option is not available in versions of Wireshark built using GTK+ 1.x.

This menu item is the same as the File menu item of the same name. It allows you to export raw packet bytes to a binary file.

Change or apply a new relation between two dissectors.

Print packets.

Display the selected packet in a new window.

Expand the currently selected subtree.

Expand all subtrees in all packets in the capture.

Wireshark keeps a list of all the protocol subtrees that are expanded, and uses it to ensure that the correct subtrees are expanded when you display a packet. This menu item collapses the tree view of all packets in the capture list.

Copy the displayed text of the selected field to the system clipboard.

Copy the name of the selected field to the system clipboard.

Copy the value of the selected field to the system clipboard.

Prepare a display filter based on the currently selected item and copy it to the clipboard.

Copy the packet bytes to the clipboard in hexdump-like format; similar to the Packet List Pane command, but copies only the bytes relevant to the selected part of the tree (the bytes selected in the Packet Bytes Pane).

Copy the packet bytes to the clipboard in hexdump-like format, but without the text portion; similar to the Packet List Pane command, but copies only the bytes relevant to the selected part of the tree (the bytes selected in the Packet Bytes Pane).

Copy the packet bytes to the clipboard as ASCII text, excluding non-printable characters; similar to the Packet List Pane command, but copies only the bytes relevant to the selected part of the tree (the bytes selected in the Packet Bytes Pane).

Copy the packet bytes to the clipboard as an unpunctuated list of hex digits; similar to the Packet List Pane command, but copies only the bytes relevant to the selected part of the tree (the bytes selected in the Packet Bytes Pane).

Copy the packet bytes to the clipboard as raw binary; similar to the Packet List Pane command, but copies only the bytes relevant to the selected part of the tree (the bytes selected in the Packet Bytes Pane). The data is stored in the clipboard as MIME-type "application/octet-stream".

This option is not available in versions of Wireshark built using GTK+ 1.x.

This menu item is the same as the File menu item of the same name. It allows you to export raw packet bytes to a binary file.

Prepare and apply a display filter based on the currently selected item.

Prepare a display filter based on the currently selected item.

Prepare a display filter based on the currently selected item and use it to prepare a new colorize rule.

Allows you to view all the data on a TCP stream between a pair of nodes.

Same as "Follow TCP Stream" but for SSL. XXX - add a new section describing this better.

Show the wiki page corresponding to the currently selected protocol in your web browser.

Show the filter field reference web page corresponding to the currently selected protocol in your web browser.

The menu item takes you to the properties dialog and selects the page corresponding to the protocol if there are properties associated with the highlighted field. More information on preferences can be found in Figure 10.8, “The preferences dialog box”.

Change or apply a new relation between two dissectors.

Causes a name resolution to be performed for the selected packet, but NOT every packet in the capture.

If the selected field has a corresponding packet, go to it. Corresponding packets will usually be a request/response packet pair or such.