Ask Your Question

What's a display filter that only shows packets with a particular UDP source port number?

asked 2020-03-09 15:14:01 +0000

ohh_bnertt12312 gravatar image

updated 2020-03-09 18:12:59 +0000

Guy Harris gravatar image

I'm looking at a UDP capture for a command prompt inquiry where I released my current IP address and then renewed it. Even with the UDP filter, there's still a lot of data packets to go through so I need to apply a second filter that will only show the UDP source port number of the client. Any ideas on how to do that? I've Googled it a few times but can't find the exact filter I would need. Any help would be greatly appreciated. Thanks!

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2020-03-09 18:12:48 +0000

Guy Harris gravatar image

If you only want to see packets with a particular UDP source port value, that would be "udp.srcport == <value>". where "<value>" is the port number value.

That will, however, only show packets from the client, not packets to the client. If you want to see packets from and to that port, that would be "udp.port == <value>".

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2020-03-09 15:14:01 +0000

Seen: 4,062 times

Last updated: Mar 09 '20