Wireshark · Wireshark-users: Re: [Wireshark-users] Need filters

["David H. Lipman" <DLipman@xxxxxxxxxxx>]

From: "bart sikkes" <b.sikkes@xxxxxxxxx>

>> Thanx!

>> I passed on your comment.  Maybe what I should do next is point him to this News
>> group.

| and what if the malware uses the port(s) you are going to exclude?
| specially with malware i would be careful with what you call noise,
| that noise can be used to hide the malware.

| bart

Good point but, after a while of examining malware communications you get a good feel for 
what they don't do.

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp