Save only relevant traffic (5 packets) and exclude the unwanted traffic (397 packets). Number2 - relevant number of packets on interface of Step-4 : save packets Number1- total number of packets captured on interface Instead of “http contains “Google”” please Enter “ip.addr = 104.26.11.240” without double quotes.Īnd hit the enter key, your red filter Colour become green & you can see at the bottom In your case, open cmd prompt (windows user) and Nslookup your URL to find the ip address To apply correct filter, you should know the public IP address or port (or both). (Refer below video for detail information: The most basic way to apply a filter is by typing it into the filter box at the top of the window and clicking Apply (or pressing Enter). Note that straight line next to interface means no active traffic on that interface. If you are confused with many options, please remove unwanted connected devices to reduce the options, also open any YouTube video so that you can see the traffic fluctuation on your internet link interface. be helpful for you to test your capture filter string with wireshark with the -f. If you are using wireless router to connect internet, then select the Wi-fi: en0 option. This manual will help you use Wireshark to analyze RTPS packets. This allows you to control who can run Wireshark. To run Wireshark, you must be a member of the wireshark group, which is created during installation.

On the next screen, press Tab to move the red highlight to and press the Space bar. You need to choose the interface you're sniffing data from. Press Tab to move the red highlight to and press the Space bar.

Wireshark filters and their usage