Filter packets from non-origin website
Hello. This question was previously asked on the old Q&A but left as unanswered.
When visiting most websites, the visited website will send requests to various different websites. One example of this is that google.com may send requests to www.gstatic.com. When I am using a DNS filter, these external requests show up.
I would like to filter out all packets that are not from the origin website. Currently, I am using a filter that shows all websites visited on my internet using DNS.
udp.srcport eq 53 or tcp[13] eq 2 && dns.qry.name contains "www."
Is it possible to filter out these external requests with wireshark? Thank you for your time and effort.
You are ambiguous in your request. First you ask to 'filter out all packets that are not from the origin website', which is easily done using the IP address of the origin website. Then you ask 'to filter out these external requests', which are concepts at the application layer, i.e., the HTTP get request, which is easily done by using the http.host as display filter. Try to more strictly define what you want.
@Jaap I am sorry that my request is too ambiguous. My current filter shows all website searches on my internet connection. However, whenever any site is reached, it sends out requests to other sites that the original searcher may not know about, or doesn't intend to visit. Is there any way to remove these "external" sites while retaining my original filter?