Wireshark-users: Re: [Wireshark-users] [Q] Filter filter expression for Android emulator.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 18 Mar 2009 17:28:59 -0700

On Mar 18, 2009, at 5:03 PM, 박석종 wrote:

I am just new to WireShark, and want to use it for sniffing traffic between Android Emulator and my host computer. I want to focus only on traffic between two. I use DDMS from Android ADT for debugging, whose device monitoring serivces listens on port from 8600. I would like to sniff traffic from one on port 8600.

How can I express capture filter string for this purpose?

I.e., you want to capture traffic to and from a particular host on port 8600?

That's

	host {host name or IP address of the host} and port 8600

For example, "host 19.202.41.87 and port 8600" if the host in question has the IP address 19.202.41.87, or "host ddms-1 and port 8600" if the host in question has the host name "ddms-1".

You can use "tcp port 8600" if 8600 happens to be a TCP port or "udp port 8600" if 8600 happens to be a UDP port.