This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to filter packets by specific application in wireshark?

0

I have captured the data/packets from a network now i don't have an idea to filter this data by android application i.e. skype, instagram, soundcloud. please anyone tell me.

asked 24 Apr '17, 03:56

Muhammad%20Juniad's gravatar image

Muhammad Juniad
6112
accept rate: 0%


One Answer:

2

There is no direct method to do so as the sending application is not captured along with the traffic. Most applications do have a "signature" to their traffic e.g. by port use or specific data in each packet, and Wireshark uses this to perform dissection of the respective traffic.

However, it's likely that the traffic for the applications you have listed will be encrypted and as such it's very difficult to determine what application sent any specific encrypted packet.

answered 24 Apr '17, 04:20

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%