Wireshark mailing list archives
Re: port monitoring
From: mike dodson <mikejd208 () gmail com>
Date: Tue, 4 Sep 2012 17:23:10 -0600
Thanks for the help but the suggestions did not work at all but with a bit of playing around with the filter I was able to get it to work as listed below. tcp.port != 80 and tcp.port !=443 and udp.port != 80 and udp.port !=443 which does not report any port 80 or port 443. Thanks for all the help as I can now see the traffic that I want. I just need to remove all internal network information so that all I see is data moving across the network to the internet only. On Tue, Sep 4, 2012 at 4:31 PM, Marco Zuppone <msz () msz it> wrote:
Hi, you'd try with this: (not tcp port 80) and (not tcp port 443) Regards, Marco - StockTrader On 4 Sep 2012, at 23:18, mike dodson <mikejd208 () gmail com> wrote:I would like to monitor for a few days anything going out on any portother than port 80 or port 443. is there a simple display filter that I can use to see this information. I am new and still learning some of the simple stuff. The reason for doing this is so that I can right a firewall rule to block all ports but what is needed.thank you for all the help.___________________________________________________________________________Sent via: Wireshark-users mailing list <wireshark-users () wireshark org Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org ?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- port monitoring mike dodson (Sep 04)
- Re: port monitoring Marco Zuppone (Sep 04)
- Re: port monitoring mike dodson (Sep 04)
- Re: port monitoring Guy Harris (Sep 04)
- Re: port monitoring Christopher Maynard (Sep 04)
- Re: port monitoring mike dodson (Sep 04)
- Re: port monitoring Marco Zuppone (Sep 04)
- Re: port monitoring sigafoose (Sep 04)
- Re: port monitoring Christopher Maynard (Sep 04)