Wireshark · Wireshark-users: Re: [Wireshark-users] [Q] Filter filter expression for Android emulator.

[Guy Harris <guy@xxxxxxxxxxxx>]

On Mar 18, 2009, at 5:03 PM, 박석종 wrote:

> I am just new to WireShark, and want to use it for sniffing traffic  
> between Android Emulator and my host computer.
> I want to focus only on traffic between two. I use DDMS from Android  
> ADT for debugging, whose device monitoring serivces
> listens on port from 8600. I would like to sniff traffic from one on  
> port 8600.
>
> How can I express capture filter string for this purpose?

I.e., you want to capture traffic to and from a particular host on  
port 8600?

That's

	host {host name or IP address of the host} and port 8600

For example, "host 19.202.41.87 and port 8600" if the host in question  
has the IP address 19.202.41.87, or "host ddms-1 and port 8600" if the  
host in question has the host name "ddms-1".

You can use "tcp port 8600" if 8600 happens to be a TCP port or "udp  
port 8600" if 8600 happens to be a UDP port.