Is it possible to apply Wireshark's telnet data filter to any ports other than 23? I've been trying to analyse traffic to several non-standard ports and I haven't been able to get it working. asked 14 Nov '12, 13:49  rarkham |
One Answer:
You need to tell Wireshark, that the other port is to be decoded as telnet. Example: The telnet server accepts connections on port 2323. In Wireshark select a packet from the conversation on port 2323. Right click on that packet and select:
From the list of protocols select TELNET. Click on OK. Now the display filter telnet.data will also match on port 2323. Regards answered 14 Nov '12, 14:17  Kurt Knochner ♦ edited 14 Nov '12, 14:18 |
That's exactly what I needed, thank you!