In this lecture, we are going to filter traffic by port numbers.
Port filtering allows us to filter traffic based on the port numbers that you supply to a Wireshark.
We can apply filters on both UDP and TCP ports.
So let's get started.
So I'm going to start with filtering TCP packets on port number four, four, three.
So type TCP port equal to four, four, three, hit enter.
Now Wireshark is only displaying the TCP packets on port number four, four, three and in the same
way you can filter UDP traffic as well.
So let me replace TCP with UDP.
It enter now it is displaying the UDP packets on port number four, four, three.
Right.
Quick protocol also uses UDP as you can see down here quick.
Then we have the UDP.
Now let's combine multiple port numbers.
So right.
Or I'm going to filter TCP IP traffic on port number four for three modern applications.
Use both UDP and TCP.
Right.
So if I hit enter now it is displaying both TCP and UDP packets on the specified port.
Number four, four, three.
Of course, you can use a different port number, let's say eight zero.
Now it is displaying UDP packets on port number four, four three and TCP packets on port number eight
zero.
Now let's check the packets that have been delivered to a specific port.
So type TCP port, DSD port equal to eight zero.
Now this filter is going to display the TCP packets that have been delivered to port number eight zero.
And if you replace DSD with source, it is going to display the packets that originated from port number
eight zero.