Display filter: Destination contains "microsoft" ?

asked 2024-01-24 13:57:21 +0000

Rudi gravatar image

How would I formulate a display filter like mentioned above, so that in the display window only those lines show up that contain (for example) "microsoft" in the "Destination" string?

edit retag flag offensive close merge delete

Comments

What is "Destination", a specific field in a specific protocol or a column?

grahamb gravatar imagegrahamb ( 2024-01-24 14:42:58 +0000 )edit

Can you update the question with the output of wireshark -v or Help->About Wireshark:Wireshark.

Filtering on columns is a recent addition to Wireshark:
10513: epan: Register columns fields and make them filterable (dynamic version)

_ws.col.def_dst contains "msn.com" work with The Ultimate PCAP and Wireshark Version 4.2.2 (v4.2.2-0-g404592842786).

Chuckc gravatar imageChuckc ( 2024-01-24 15:01:07 +0000 )edit
add a comment