Wireshark Filters - termcap/cybersecurity GitHub Wiki All arp queries with opcode [ reply (2)] arp and arp.opcode == 2 All arp queries with opcode [ request (1)] arp and arp.opcode == 1