PCAP Analysis - Wireshark

# Filters
ip.addr == <IP Address>
ip.src == <SRC IP Address> and ip.dst == <DST IP Address>
tcp.port eq <Port #> or <Protocol Name>
udp.port eq <Port #> or <Protocol Name>
# arp opcode: Request (1) Reply (2)
# Ex: reply
arp and arp.opcode eq 2 

# Operators
    and - operator: and / &&
    or - operator: or / ||
    equals - operator: eq / ==
    not equal - operator: ne / !=
    greater than - operator: gt /  >
    less than - operator: lt / <

PreviousForensicNextDNS

Last updated