Guy Harris <guy@...> writes:
> > tcp.port != 80 and tcp.port !=443 and udp.port != 80 and udp.port !=443
>
> Yes, that's the right way to filter it out once you've captured the packets.
The capture filters would help
> if you want to avoid even *capturing* "uninteresting" packets (TCP or UDP
packets to or from port 443).
Even better is to use something like the following to avoid any possible
ambiguities that could possibly arise:
!(tcp.port == 80 or tcp.port == 443 or udp.port == 80 or udp.port == 443)