This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Use telnet filter on arbitrary ports?

0

Is it possible to apply Wireshark's telnet data filter to any ports other than 23? I've been trying to analyse traffic to several non-standard ports and I haven't been able to get it working.

asked 14 Nov '12, 13:49

rarkham's gravatar image

rarkham
6113
accept rate: 0%


One Answer:

3

You need to tell Wireshark, that the other port is to be decoded as telnet.

Example: The telnet server accepts connections on port 2323.

In Wireshark select a packet from the conversation on port 2323. Right click on that packet and select:

Decode As -> Transport -> TCP Destination (2323)

From the list of protocols select TELNET. Click on OK.

Now the display filter telnet.data will also match on port 2323.

Regards
Kurt

answered 14 Nov '12, 14:17

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 14 Nov '12, 14:18

That's exactly what I needed, thank you!

(14 Nov '12, 15:05) rarkham