QA Engineering/End to End Test

wire shark 검색 패턴

일해라폴폴 2018. 2. 6. 08:50
반응형

지금은 사용하고 있지 않지만...

예전에 많이 썻던 wire shark. wireshark.org에 들어가면 자세히 나왔지만 편하게 찾기 위해서 여기에 정리해 놓아야 겠다.


wireshark에서 많이 쓰이는 패턴

DISPLAY FILTER

EXPLANATION

EXAMPLE

eth.addrsource or destination mac-addresseth.addr == 00:1a:6b:ce:fc:bb
eth.srcsource mac-addresseth.src == 00:1a:6b:ce:fc:bb
eth.dstdestination mac-addresseth.dst == 00:1a:6b:ce:fc:bb
arp.dst.hw_mactarget mac-addressarp.dst.hw_mac == 00:1a:6b:ce:fc:bb
arp.dst.proto_ipv4target IPv4 addressarp.dst.proto_ipv4 == 10.10.10.10
arp.src.hw_macsender mac-addressarp.src.hw_mac == 00:1a:6b:ce:fc:bb
arp.src.proto_ipv4sender IPv4 addressarp.src.proto_ipv4 == 10.10.10.10
vlan.idvlan IDvlan.id == 16
ip.addrsource or destination IPv4 addressip.addr == 10.10.10.10
ip.dstdestination IPv4 addressip.addr == 10.10.10.10
ip.srcsource IPv4 addressip.src == 10.10.10.10
ip.protoIP protocol (decimal)ip.proto == 1
ipv6.addrsource or destination IPv6 addressipv6.addr == 2001::5
ipv6.srcsource IPv6 addressipv6.addr == 2001::5
ipv6.dstdestination IPv6 addressipv6.dst == 2001::5
tcp.portsource or destination TCP porttcp.port == 20
tcp.dstportdestination TCP porttcp.dstport == 80
tcp.srcportsource TCP porttcp.srcport == 60234
udp.portsource or destination UDP portudp.port == 513
udp.dstportdestination UDP portudp.dstport == 513
udp.srcportsource UDP portudp.srcport == 40000
fr.dlciFrame-Relay DLCI numberfr.dlci == 112
icmp.typeICMP type code (decimal)icmp.type == 8
vtp.vlan_info.vlan_nameVLAN namevtp.vlan_info.vlan_name == TEST
bgp.originator_idBGP id (IPv4 address)bgp.originator_id == 192.168.10.15
bgp.next_hopBGP Next Hop (IPv4 address)bgp.next_hop == 192.168.10.15
rip.ipRIP IPv4 addressrip.ip == 200.0.2.0
ospf.advrouterOSPF advertising router IDospf.advrouter == 192.168.170.8
eigrp.asEIGRP autonomous system numbereigrp.as == 100
hsrp.virt_ipHSRP virtual IP addresshsrp.virt_ip == 192.168.23.250
vrrp.ip_addrVRRP virtual IP addressvrrp.ip_addr == 192.168.23.250
zebra.dest4ZEBRA destination IPv4 addresszebra.dest4 == 10.10.10.10
wlan.addrsource or destination MAC addresswlan.addr == 00:1a:6b:ce:fc:bb
wlan.sasource MAC addresswlan.sa == 00:1a:6b:ce:fc:bb
wlan.dadestination MAC address

wlan.da == 00:1a:6b:ce:fc:bb


반응형