© http://www.lovemytool.com/blog/2010/04/top-10-wireshark-filters-by-chris-greer.html
ip.addr == 10.0.0.1
Sets a filter for any packet with 10.0.0.1, as either the source or dest
ip.addr==10.0.0.1 && ip.addr==10.0.0.2
sets a conversation filter between the two defined IP addresses
http or dns
sets a filter to display all http and dns
tcp.port==4000
sets a filter for any TCP packet with 4000 as a source or dest port