Use wireshark Notes

Logic

　　And && or and

　　Or or or ||

　　Non-! Or not

Common filter criteria

Filtering protocol

　　Direct input http, tcp, arp, etc. can be filtered

 

Ip filter source

　　ip.src==192.168.134.128

Ip filtering purposes

　　ip.dst==192.168.134.128

Filter ip (source and destination)

　　ip.addr==192.168.134.128

　　ip.src==192.168.134.128  ||  ip.dst==192.168.134.128

Filter port

　　tcp.port==80

　　tcp.dstport==80

　　tcp.srcport==80

　　tcp.port>=60000　

Filter HTTP requests

 Filter http request url:

　　http.request.uri=="/"

　　http.request.uri=="/api/test"

Filter http request:

　　http.request

Filter http response:

　　http.response

Filter the request or response:

　　http.request || http.response

Filter for certain request types:

　　http.request.method==GET

Filter return code:

　　http.response.code==200

Content Filter:

　　http.response.line contains timeout