What's a display filter that only shows packets with a particular UDP source port number?

First time here? Check out the FAQ!

ohh_bnertt12312
1 ●2 ●2 ●3

Guy Harris
19905 ●3 ●667 ●207

I'm looking at a UDP capture for a command prompt inquiry where I released my current IP address and then renewed it. Even with the UDP filter, there's still a lot of data packets to go through so I need to apply a second filter that will only show the UDP source port number of the client. Any ideas on how to do that? I've Googled it a few times but can't find the exact filter I would need. Any help would be greatly appreciated. Thanks!

add a comment

1 Answer

Sort by » oldest newest most voted

answered Mar 9 '0

Guy Harris
19905 ●3 ●667 ●207

If you only want to see packets with a particular UDP source port value, that would be "udp.srcport == <value>". where "<value>" is the port number value.

That will, however, only show packets from the client, not packets to the client. If you want to see packets from and to that port, that would be "udp.port == <value>".

link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: Mar 9 '0

Seen: 14,532 times

Last updated: Mar 09 '20

What's a display filter that only shows packets with a particular UDP source port number? savecancel

1 Answer