In this lecture, we will learn how to use port numbers and port range filter to capture the traffic.
Let's say you only want to capture the HTTPS traffic at HTTPS runs on port number four, four, three.
Right.
So filter four, that is a port four, four, three.
We already have done it.
Right now we can further, you know, narrow it down to UDP or TCP.
So at the beginning you can specify TCP.
Now this particular filter is only going to capture the TCP traffic on port number four, three, three,
let me make it four for three.
Let me click on start and I'm going to visit a new website.
And you are not going to see any DNS queries here.
As you can see, guys, under the protocol column, not a single UDP packet has been captured.
Right?
In the same way you can capture only UDP traffic as well.
All you have to do replace the TCP with UDP.
Now this filter is only going to capture UDP traffic on port number four, four, three.
Now, as you can see, guys, Wireshark is only capturing the UDP traffic.
The quick protocol uses UDP.
Now, another filter for both numbers is the Ford Ranger.
We can specify a range of port numbers.
So type port range.
Now give it a range, let's say 1 to 80.
So, guys, this filter is only going to capture traffic on the specified range from a port number 1280.
Right.
As you can see, guys, it is capturing HTTP packets because we have specified the range from 1 to 8
080.
Port number runs the HTTP service.
So back to the port range again and you can combine multiple ranges as well.
So type or now give it another range.
This time I'm going to specify from 400 to let's say four, four, three.
Now this filter is going to capture traffic on the specified range from port number 1 to 8 zero and
from a port number 400 to 443.
Now, this time, we should be able to see the less traffic as well.
All right.
So, guys, that's how you can use the port range filter to specify the range.