38 lines
517 B
Plaintext
38 lines
517 B
Plaintext
|
C0nn3ctz sniffing wireshark network
|
||
|
|
|
||
|
|
IP address
|
||
|
|
ip.addr == 192.168.1.1
|
||
|
|
ip.src == 192.168.1.1
|
||
|
|
ip.dst == 192.168.1.1
|
||
|
|
|
||
|
|
Show only tcp port 110
|
||
|
|
tcp.port eq 110
|
||
|
|
|
||
|
|
Show only tcp and udp port 110
|
||
|
|
tcp.port eq 110 || udp.port eq 110
|
||
|
|
|
||
|
|
Follow TCP stream
|
||
|
|
tcp.stream eq 0
|
||
|
|
|
||
|
|
Show only TCP
|
||
|
|
tcp
|
||
|
|
|
||
|
|
Show only ARP
|
||
|
|
arp
|
||
|
|
|
||
|
|
Show only HTTP
|
||
|
|
http
|
||
|
|
|
||
|
|
Show only HTTP or ARP
|
||
|
|
http||arp
|
||
|
|
|
||
|
|
|
||
|
|
HTTP and ip.src
|
||
|
|
http&&ip.src==192.168.1.4
|
||
|
|
|
||
|
|
HTTP POST
|
||
|
|
http:.request.method == "POST"
|
||
|
|
|
||
|
|
etc
|
||
|
|
(ip.addr==192.168.1.0/24) and (ip.src!=192.168.1.2)and (ip.dst!=192.168.1.4)
|