eth.dst == 00:00:00:00:00:aa || eth.dst == 00:00:00:00:00:bb
host 1.2.3.4 (Source or Destination IP)
ip.addr == 1.2.3.4 ( Source or Destination IP)
ip.src == 1.2.3.4 ( Source IP )
ip.dst == 1.2.3.4 ( Destination IP )
host 1.2.3.4 and tcp.port == 80 ( The port of web )
host 1.2.3.4 and tcp.port == 23 (BBS)
Filter http and ip
(http) and (ip.addr == 111.6.1.191)
0 意見:
張貼留言