Wireshark · Wireshark-users: Re: [Wireshark-users] port monitoring

[Christopher Maynard <Christopher.Maynard@xxxxxxxxx>]

Guy Harris <guy@...> writes:

> > tcp.port != 80 and tcp.port !=443 and udp.port != 80 and udp.port !=443
> 
> Yes, that's the right way to filter it out once you've captured the packets. 
The capture filters would help
> if you want to avoid even *capturing* "uninteresting" packets (TCP or UDP
packets to or from port 443).

Even better is to use something like the following to avoid any possible
ambiguities that could possibly arise:

!(tcp.port == 80 or tcp.port == 443 or udp.port == 80 or udp.port == 443)