This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Capture filter

0

Hello.

How can i make capture filter for single protocol like Jabber fo example? I dont have certain ip or port, just protocol.

asked 07 Aug '12, 00:41

Pnk's gravatar image

Pnk
6225
accept rate: 0%


One Answer:

0

You can't really. The capture filter engine is powerful at the lower level protocols (datalink up to transport layer) but not above. The application protocols you refer to are beyond its reach.

answered 07 Aug '12, 02:33

Jaap's gravatar image

Jaap ♦
11.7k16101
accept rate: 14%