Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Filter for all data to a Port?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Behdad Forghani" <behdad.forghani@xxxxxxxxxxxxxx>
Date: Tue, 3 Feb 2009 16:59:28 -0500

Are the MAC addresses the same, if not, you can filter based on the MAC address? Let me know if it works I am curious.

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of rkruz@xxxxxxx
Sent: Tuesday, February 03, 2009 3:39 PM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Filter for all data to a Port?

 

Im using Ethereal. When two ports are mirrored and combine to a mirroring port......can Ethereal filter the data on the mirroring port to view just the packets to one of the mirrored ports? Further can that data be filtered to view only TX or RX packets?. Any help on how to set up a filter for that would be appreciated.

Thank you

T

  • References:
    • [Wireshark-users] Filter for all data to a Port?
      • From: rkruz
  • Prev by Date: Re: [Wireshark-users] Filter for all data to a Port?
  • Next by Date: [Wireshark-users] Export files with delimiters
  • Previous by thread: Re: [Wireshark-users] Filter for all data to a Port?
  • Next by thread: Re: [Wireshark-users] Filter for all data to a Port?
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation