Wireshark filters

TCP 3-way handshake

Show entire handshake

tcp.flags.syn == 1 || tcp.flags.ack == 1

Capture first SYN packet

tcp.flags.ack == 0