Index

Table of contents

wireshark

<2>display filtersfilter based on http addresses
http.request.uri matches "gl=se$"
show only traffic local to this network
ip.src==192.168.0.0/16 and ip.dst==192.168.0.0/16
restrict to ip bidirectional
ip.addr == 10.43.54.65
ip.src == 10.43.54.65 or ip.dst == 10.43.54.65
restrict based on tcp ports
tcp.port eq 25
hide protocols that cause a lot of noise
not ntp and not arp
documentation
https://wiki.wireshark.org/DisplayFilters

references

https://www.wireshark.org/docs/wsug_html_chunked/index.html