The network protocol analyzer Wireshark collects packets into a temporary file for analysis. includes the ability to use two types of filters: Capture and Display. Which statements about these filters below properly are accurate? $($choose $3)$

A display filter when applied removes the packets that do not meet the filter settings from the temporary captured file and the removed packets cannot be recovered.

The capture filter syntax is dependent on which pcap utility is being used.

Display filters can be applied to saved $.$pcap files after they have been opened in Wireshark.

The capture filter is passed to the winpcap or Npcap utility which does the filtering.

Capture filters should be avoided because they cause too much bandwidth to be used.

Display filters can only filter on IP addresses, not protocols or ports.