Re: port monitoring

[mike dodson <mikejd208 () gmail com>]

Thanks for the help but the suggestions did not work at all but with a bit
of playing around with the filter I was able to get it to work as listed
below.

tcp.port != 80 and tcp.port !=443 and udp.port != 80 and udp.port !=443

which does not report any port 80 or port 443.  Thanks for all the help as
I can now see the traffic that I want.  I just need to remove all internal
network information so that all I see is data moving across the network to
the internet only.



On Tue, Sep 4, 2012 at 4:31 PM, Marco Zuppone <msz () msz it> wrote:

> Hi,
>
> you'd try with this: (not tcp port 80) and (not tcp port  443)
> Regards,
> Marco - StockTrader
> On 4 Sep 2012, at 23:18, mike dodson <mikejd208 () gmail com> wrote:
>
> > I would like to monitor for a few days anything going out on any port
> other than port 80 or port 443.  is there a simple display filter that I
> can use to see this information.  I am new and still learning some of the
> simple stuff.  The reason for doing this is so that I can right a firewall
> rule to block all ports but what is needed.
> > thank you for all the help.
> ___________________________________________________________________________
> > Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org
> >
> > Archives:    http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> >             mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>              mailto:wireshark-users-request () wireshark org
> ?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe