Hi, I'm doing some network test, capturing packets in my PC and a the same time in a server which I connect to via Remote Desktop Connection (windows 7), this generates a lot of traffic, how can I set a filter to exclude the traffic due to the remote destkop connection? asked 29 Oct '15, 06:45 rok |
One Answer:
Capture filter: "not tcp port 3389", assuming you're running RDP on the standard port. If you connect to the server via RDP and then run Wireshark on the server, Wireshark should automatically apply that capture filter for you on the server. See the section titled "Default Capture Filters" on this page. answered 29 Oct '15, 07:08 Jim Aragon |