Is it possible to filter a wireshark trace to see all ports used within the trace?
-
10-10-2019 - |
Question
For example, I want to locate all ports used between 1 - 1024 without manually crawling through a 780 packet trace.
Solution
You can use an expression like this as a filter:
tcp.port >= 1 && tcp.port <= 1024
OTHER TIPS
It looks like viewing Statistics > Endpoints and looking at TCP and UDP gives me a list of ports used. If you've got another way to do it I'm all ears.
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow