Geek asks and answers

Filter traffic using wirehark display filters

I am learning Wireshark as part of the course. I would like to know how to use wirehark screen filters to filter traffic for a specific application. I tried to use the screen filter link for Skype provided by the link below: https://www.wireshark.org/docs/dfref/s/skype.html

However, I can’t filter Skype traffic from the one I’ve captured. Can anyone suggest an approach to filter Skype traffic?

I know how to filter traffic based on source / destination IP addresses, protocols, but I would like to know how to capture traffic of a specific application, for example, for Skype.

Are there any other tools that better filter specific application traffic from full packet capture?

+3
source share
2 answers

I suggest that in your case rawcap might be useful . I used it to eavesdrop on my applications. Filmed rawfile can be opened using wirehark. I used it in loopback. You shoud be able to listen to skype as well. After you have captured enough data, close it with ctrl + c, if I remember correctly, and then open the file where you saved all the information using wirehark

+2
source

Skype ( Skype). SSL (HTTPS). , Skype Wireshark .

PCAP CapLoader (, TCP 443). PCAP.

+2

More articles:


All Articles