What's a display filter that only shows packets with a particular UDP source port number?

asked 2020-03-09 15:14:01 +0000

ohh_bnertt12312
1 ●2 ●2 ●3

updated 2020-03-09 18:12:59 +0000

Guy Harris
19890 ●3 ●633 ●207

I'm looking at a UDP capture for a command prompt inquiry where I released my current IP address and then renewed it. Even with the UDP filter, there's still a lot of data packets to go through so I need to apply a second filter that will only show the UDP source port number of the client. Any ideas on how to do that? I've Googled it a few times but can't find the exact filter I would need. Any help would be greatly appreciated. Thanks!

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2020-03-09 18:12:48 +0000

Guy Harris
19890 ●3 ●633 ●207

If you only want to see packets with a particular UDP source port value, that would be "udp.srcport == <value>". where "<value>" is the port number value.

That will, however, only show packets from the client, not packets to the client. If you want to see packets from and to that port, that would be "udp.port == <value>".

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-03-09 15:14:01 +0000

Seen: 5,421 times

Last updated: Mar 09 '20

What's a display filter that only shows packets with a particular UDP source port number? edit

1 Answer