Common WireShark filters

tcp

tcp.port = 443

flags

tcp.analysis.flags
tcp.analysis.retransmission
tcp.analysis.lost_segment

Combination

ip.src == 118.xx.xx.xx and tcp.port == 443

1 thought on “Common WireShark filters”

Leave a Comment

Your email address will not be published. Required fields are marked *