Hello, the IP I am connecting to can change, but it always uses 2 destination ports (for example purposes, 00000 and 11111). Let me know what to put in the filter list. asked 08 Apr '15, 13:47  BobTheLawyer edited 08 Apr '15, 14:12 |
One Answer:
OK, that's a display filter, it will affect what is displayed, not what is in the capture file. I asked which one because they have different syntax. A display filter to filter on certain tcp ports e.g. 1234 and 5678: adjust the port numbers as you require and replace tcp with udp if that's the protocol in use. You can add as many ports as you wish with extra 'or' conditions. You can also create a filter by right-clicking on a field in the protocol tree and selecting "Apply as Filter" -> Selected. See the wiki page on Display Filters for more info and links to other sources of information. answered 09 Apr '15, 03:09  grahamb ♦ If an answer has solved your issue, please accept the answer for the benefit of other users by clicking the checkmark icon next to the answer. Please read the FAQ for more information. (09 Apr '15, 04:39) Jaap ♦ |
What type of filter, capture or display?
Sorry, I'm pretty new. I'm not sure. Here's an image: http://i.imgur.com/PsT3Eyi.png