This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Is it possible to apply Wireshark's telnet data filter to any ports other than 23? I've been trying to analyse traffic to several non-standard ports and I haven't been able to get it working.

asked 14 Nov '12, 13:49

rarkham's gravatar image

rarkham
6113
accept rate: 0%


You need to tell Wireshark, that the other port is to be decoded as telnet.

Example: The telnet server accepts connections on port 2323.

In Wireshark select a packet from the conversation on port 2323. Right click on that packet and select:

Decode As -> Transport -> TCP Destination (2323)

From the list of protocols select TELNET. Click on OK.

Now the display filter telnet.data will also match on port 2323.

Regards
Kurt

permanent link

answered 14 Nov '12, 14:17

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 14 Nov '12, 14:18

That's exactly what I needed, thank you!

(14 Nov '12, 15:05) rarkham
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×349
×69
×20

question asked: 14 Nov '12, 13:49

question was seen: 4,414 times

last updated: 14 Nov '12, 15:05

p​o​w​e​r​e​d by O​S​Q​A