• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

wireshark: different result btween CAPTURE and DISPLAY filtr

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Security Related Software

View previous topic :: View next topic  
Author Message
baseline
Just Arrived
Just Arrived


Joined: 05 Mar 2010
Posts: 0


Offline

PostPosted: Fri Mar 05, 2010 6:09 am    Post subject: wireshark: different result btween CAPTURE and DISPLAY filtr Reply with quote

For same traffic, why do CAPTURE and DISPLAY filter behave differently?
In my test, I try to capture yahoo msgr traffic from/to PC with IP x.x.x.179

With blank CAPTURE filter and DISPLAY filter = ""ip.addr==x.x.x.179" the result is:


But with blank DISPLAY filter and CAPTURE filter = "tcp port 5050" I got nothing at all:


If it matters, my wireshark is getting its packets from remote-capture by a mikrotik box (internet gateway)

Thanks in advance
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Security Related Software All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register