WireShark
Concept¶
Filtering¶
| filter | actions |
|---|---|
| frame contains "google" | in the all trace contains "google" |
| frame matches "google" | in the all trace contains "google" without case sensitive |
| tcp.port == 21 | filter port 21 |
| ftp.request.command == "USER" | the owner of request |
| (ftp.request.command == "STOR") | the files saved |
| ip.addr == 10.10.10.10 | IP |