Re: port monitoring

[Christopher Maynard <Christopher.Maynard () gtech com>]

Guy Harris <guy@...> writes:

> > tcp.port != 80 and tcp.port !=443 and udp.port != 80 and udp.port !=443
>
> Yes, that's the right way to filter it out once you've captured the packets. 
The capture filters would help
> if you want to avoid even *capturing* "uninteresting" packets (TCP or UDP
packets to or from port 443).

Even better is to use something like the following to avoid any possible
ambiguities that could possibly arise:

!(tcp.port == 80 or tcp.port == 443 or udp.port == 80 or udp.port == 443)



___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe