Wireshark mailing list archives
Re: Capture filter question
From: David Alanis <canito () dalan us>
Date: Sat, 05 Nov 2011 20:45:15 -0500
Quoting Marco Zuppone <msz () msz it>:
Hello, I have a question about capture filters.I noticed that the basic capture filter predefined in Wireshark to do not capture arp and DNS requests is defined in this way:not arp and port not 53 What is the difference with: not arp and not port 53? Thanks in advance Marco - StockTrader ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
I don't quite know about the capture filter whether default or not. 'not arp' means that it will filter out the address resolution protocol communication and 'not arp' will filter out communication over port 53, mostly if not absolutely DNS requests.
You can read more about ARP here: http://www.tildefrugal.net/tech/arp.php Cheers- ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Capture filter question Marco Zuppone (Nov 05)
- Re: Capture filter question David Alanis (Nov 05)
- Re: Capture filter question David Alanis (Nov 05)
- Re: Capture filter question Marco Zuppone (Nov 06)
- Common Traffic haZard0us (Nov 06)
- Re: Common Traffic j.snelders (Nov 06)
- Re: Capture filter question Sake Blok (Nov 06)
- Re: Capture filter question Marco Simone Zuppone (Nov 07)
- Re: Capture filter question David Alanis (Nov 05)
- Re: Capture filter question David Alanis (Nov 05)