"TCP only" tcp
"UDP only" udp
"Capture DNS" port 53
"Capture DHCP" port 67 or port 68
"Capture SIP+RTP" port 5060 or portrange 10000-20000
"Capture HTTP/S" port 80 or port 443
"Capture FTP" port 20 or port 21
"Exclude broadcast" not broadcast and not multicast
"Local subnet only" net 192.168.0.0/16 or net 10.0.0.0/8 or net 172.16.0.0/12
