How to understand Wireshark filtering rules and filtering options

The editor today takes you to understand how to understand Wireshark filtering rules and filtering options. The knowledge points in the article are introduced in great detail. Friends who feel helpful can browse the content of the article with the editor, hoping to help more friends who want to solve this problem to find the answer to the problem. Follow the editor to learn more about "how to understand Wireshark filtering rules and filtering options".

 ip.addr = = 192.168.6.1

 filters out messages containing 192.168.6.1



 ip.src = 192.168.43.137

 filters out the message with the source IP address 192.168.43.137



 ip.dst = 192.168.43.137

 filters out messages with the destination IP address of 192.168.43.137



 tcp.port = = 80

 filters out the 80 port numbers that contain tcp



 tcp.src = = 80

 filters out the 80 port number of the source tcp



 tcp.dstport = = 80

 filters out the 80 port number of the target tcp



 eth.addr = = 68:17:29:2f:c4:2f

 filters out the included mac address



 eth.src = = 68:17:29:2f:c4:2f

 filters out the source mac address



 eth.dst = = 68:17:29:2f:c4:2f

 filters out the destination mac address



 arp

 filter out arp protocol

 and and

 or or

 not is not

 () parentheses

 tcp or http and (not http)

Save only specified messages

Save only 9, 10, 11, 12, 4 messages.

Thank you for your reading, the above is the whole content of "how to understand Wireshark filtering rules and filtering options". Friends who learn to learn to do it quickly. I believe that the editor will certainly bring you better quality articles. Thank you for your support to the website!