WireShark filters
WireShark filters Below are few WireShark filters ip.addr == <IP address> : To filter by IP address tcp.port == <Port no> : To filter by port number dns or http : Displays dns and http traffic frame matches "<string>" : Strings search tcp.analysis.flags : Shows the problems like packet loss, windows problem !(arp or dns or icmp) : removes arp, dns and icmp from the traces Follow TCP stream : Any packets that are related to the tcp conversation tcp.stream eq 32 ...