Search code examples
network-programmingwiresharkpacket-sniffers

Is it possible to filter a wireshark trace to see all ports used within the trace?


For example, I want to locate all ports used between 1 - 1024 without manually crawling through a 780 packet trace.


Solution

  • You can use an expression like this as a filter:

    tcp.port >= 1 && tcp.port <= 1024