Hi, i need some help here. i have to capture traffic using http-alt port. how can i configure wireshark filter ?. Thanks asked 13 Oct '15, 08:58  buddhaa11 edited 13 Oct '15, 11:37  Jim Aragon |
One Answer:
The Wireshark services file identifies ports 591, 8008, and 8080 as http-alt. So, the capture filter would be "port 591 or port 8008 or port 8080". You could further restrict the filter by putting "tcp" or "udp" in front of "port". Wireshark identifies both TCP and UPD traffic over those ports as http-alt. The display filter would be "tcp.port==591 or tcp.port== 8008 or tcp.port==8080". This is for http-alt traffic over TCP only. You could also add expressions for UDP. answered 13 Oct '15, 11:33 Jim Aragon |
