Comments on: Wireshark’s most useful display filters

By: Netcowboy

Netcowboy — Fri, 04 Jun 2010 20:25:48 +0000

Hi Adrian
Just use capture filer -> port 110

That’s it

By: Adrian

Adrian — Wed, 12 May 2010 22:46:21 +0000

I need to filter and analyze IP packets on port 110. I used the filter commend tcp.port == 110 but I got nothing.
Port 110 is used for POP3, but I don’t know how to get the “POP3 traffic” flowing.

Thank you!

By: gezim

gezim — Tue, 11 May 2010 16:37:06 +0000

for pop3 u can use outlook express but it's only for SMTP if I have right I don't know if I have help something but try

By: Bes

Bes — Tue, 05 Jan 2010 10:23:38 +0000

Thank you!

By: Tom

Tom — Fri, 04 Dec 2009 19:03:03 +0000

Very useful, thanks!

By: Calin

Calin — Mon, 09 Nov 2009 15:55:55 +0000

If you type "dns" (without quotes) in the Filter field of Wireshark, do you obtain what you want? In this way you can see only the DNS traffic that it's flowing from the LAN interface.

If this isn't what you intended, please add some more details to your request.

Good luck!

By: Joe

Joe — Mon, 09 Nov 2009 01:46:59 +0000

Do you have an example of a filter that shows only DNS server addresses being used by clients on the LAN?

Thank you!