Wireshark · Wireshark-users: Re: [Wireshark-users] port monitoring

[mike dodson <mikejd208@xxxxxxxxx>]

Thanks for the help but the suggestions did not work at all but with a bit of playing around with the filter I was able to get it to work as listed below.

 

tcp.port != 80 and tcp.port !=443 and udp.port != 80 and udp.port !=443

 

which does not report any port 80 or port 443.  Thanks for all the help as I can now see the traffic that I want.  I just need to remove all internal network information so that all I see is data moving across the network to the internet only.

 

On Tue, Sep 4, 2012 at 4:31 PM, Marco Zuppone <msz@xxxxxx> wrote:

Hi,

you'd try with this: (not tcp port 80) and (not tcp port  443)
Regards,
Marco - StockTrader
On 4 Sep 2012, at 23:18, mike dodson <mikejd208@xxxxxxxxx> wrote:

> I would like to monitor for a few days anything going out on any port other than port 80 or port 443.  is there a simple display filter that I can use to see this information.  I am new and still learning some of the simple stuff.  The reason for doing this is so that I can right a firewall rule to block all ports but what is needed.
> thank you for all the help.
>
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe