Wireshark常用过滤条件

1.tcp包中包含auth

tcp contains "auth"

2.请求的url中包含auth

http.request.uri contains "auth"

3.端口过滤

tcp.port == 3320

4.协议过滤

http

5.ip地址过滤

ip.addr == 192.186.3.1  //eq
ip.src == 192.186.3.1

6.请求方式过滤

http.request.method == "POST"