Wireshark-users: Re: [Wireshark-users] how to filter a port?

From: Jeff Morriss <jeff.morriss@xxxxxxxxxxx>
Date: Mon, 26 Feb 2007 13:45:28 +0800


David Drexler wrote:
I'm running the latest wireshark and winpcap. I want to capture everything except http traffic. Seems like

not port 80

would do it - but it doesn't, I still see lots of http. What am I doing wrong?

That's a capture filter to eliminate things on TCP (and UDP) port 80. Is the HTTP traffic you're seeing on a different port?

If so, you could try a display filter (applied after the capture is done) like "!http".