• jcnetworking
  • LONDON

Wireshark – commands that I always use

ip.addr == I always use this to quickly filter the ip address, I focus on. what transactions is related to it. ip.dst / ip.src If I know the destination and source Ip address, that is the command. I can narrow it down the flow. ip.flags.syc == 1 && ip.flags.ack == 1 As we know, TCP got 3 way handshake. With […]