Wireshark Common Commands

? Ip.addr = = 192.168.6.1
? filter out messages that contain 192.168.6.1
?
? ip.src = = 192.168.43.137
Filter out messages with a source IP address of 192.168.43.137
?
? ip.dst = = 192.168.43.137
Filter out messages with a target IP address of 192.168.43.137
?
? tcp.port = = 80
? filter out 80 port numbers that contain TCP
?
? tcp.src = = 80
? filter out the 80 port number of the source TCP
?
? tcp.dstport = = 80
? filter out the 80 port number of the target TCP
?
? eth.addr = = 68:17:29:2f:c4:2f
? filter out the included MAC address
?
? eth.src = = 68:17:29:2f:c4:2f
? filter out the source MAC address
?
? eth.dst = = 68:17:29:2f:c4:2f
? filter out the destination MAC address
?
? arp
? filter out the ARP protocol

? and and
? or OR
? Not non-
? () brackets
? TCP or HTTP and (not HTTP)

Wireshark Common Commands