Wireshark 过滤器

捕获过滤器

 

dhcp only      udp port 68 and udp port 67

 

Protocol     ether  ip  arp tcp udp rarp

 

direction   src dst  src and dst  src or dst

 

host   net  port  host portrange

 

logical operations    not 具有最高优先级  or and 具有相同优先级  运算从左至右

 

not tcp port 3128 and tcp port 23  = （not tcp port3128 ) and tcp port23

 

not tcp port3218 and tcp port 23 不等于 not (tcp port3128 and tcp port 23)

 

tcp dst port 3128

 

ip src host 10.1.1.1

 

host 10.1.2.3

 

src portrange 2000-2500

 

no icmp

 

src host 10.7.2.12 and not dst net 10.200.0.0/16

 

(src host 10.4.1.12 or src net 10.6.0.0/16) and  tcp dst portrange 200-10000 and dst net 10.0.0.0/8

 

 

ether proto \ip

 

ether proto \icmp

 

multicast  broadcast 

 

no broadcast    no multicast

 

ether host 00:08:15:00:08:15

 

ether proto 0x0806

 

no arp

 

ip

 

tcp port http

 

port no 53

 

not port 80 and not port 25 and www.wireshark.org

本文出自 “一颗平和的心” 博客，谢绝转载！