This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I was troubleshooting a network issue on a host remotely, I had the following filter set: ip.addr eq my.ip.addr and tcp.port !=#### I set the tcp.port to not equal the one LogMeIn was using so that I can see other traffic coming from me to the remote host that is not the remote desktop session. But it was filtering out my ICMP traffic to the host as well, not sure what I'm doing wrong here.

Thank you

asked 08 Jul '13, 16:51

reikokuko's gravatar image

reikokuko
11223
accept rate: 0%

edited 08 Jul '13, 17:41

cmaynard's gravatar image

cmaynard ♦♦
9.3k1038142


Since you specified a filter part that filters on a TCP port it will filter away ICMP because that is just not TCP (unless you get an ICMP error that quotes a TCP layer). You could change your filter to

ip.addr eq my.ip.addy and icmp or tcp.port !=####
permanent link

answered 08 Jul '13, 16:59

Jasper's gravatar image

Jasper ♦♦
23.8k551284
accept rate: 18%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×165
×74

question asked: 08 Jul '13, 16:51

question was seen: 2,492 times

last updated: 08 Jul '13, 17:41

p​o​w​e​r​e​d by O​S​Q​A