Wireshark Filters

List of Wireshark filters.

  • Find an IP address in either the source or destination fields
    • ip.host == <IP Address>
  • Find an IP address in the source field
    • ip.src == <IP Address>
  • Find an IP address in the destination field
    • ip.dst == <IP Address>

 

  • Find an TCP port
    • tcp.port == <Port number>
  • Find an UDP port
    • udp.port == <Port number>

 

  • Show CDP (Cisco Discovery Protocol) packets
    • cdp
  • Show LLDP (Link Layer Discovery Protocol) packets
    • lldp
  • Show ARP packets
    • arp
  • Show IPv4 packets
    • ip
  • Show IPv6 packets
    • ipv6