networking - Wireshark Display Filters -
i'm beginner in wireshark , have task following wireshark display filters:
a- packets specific network interface car ex: intel b- unicast traffic c- traffic except from/to www.vgtu.lt
a) in wireshark in menu bar capture->interfaces can specify interface capture
b) (eth.dst[0] & 1) display multicast , broadcast packets . can use not expression of display unicast messages .
!(eth.dst[0] & 1)
c) !(http.host eq "www.vgtu.lt") not show http packets .
you can use nslookup tool ip address of domain name www.vgtu.lt
c:\users\praveen>nslookup www.vgtu.lt server: unknown address: 192.169.1.1
non-authoritative answer: name: web.vgtu.lt address: 158.129.192.20 aliases: www.vgtu.lt
now can use filter !(ip.addr == 158.129.192.20)
Comments
Post a Comment