First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

specific layer protocols

  • retag add tags

Hi there, Is there a way to see and filter a specific layer protocols? For example i want to see only Application layer protocols, how can i set a filter or a setting to see only those protocols?

Thanks

XLastAngelX's avatar
3
XLastAngelX
asked 2019-03-16 11:25:46 +0000
edit flag offensive 0 remove flag close merge delete

Comments

"See" in what sense?

Would an example be wanting to see only HTTP traffic, and not, for example, TCP ACK-only packets on the same TCP connection as the HTTP traffic?

Guy Harris's avatar Guy Harris (2019-03-16 18:56:19 +0000) edit
more
  • delete

Yes something like this but for the application layer not only HTTP but all the application layer protocols without the other layers

XLastAngelX's avatar XLastAngelX (2019-03-17 07:01:40 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

Wireshark does not have any mechanism by which a protocol is assigned to a particular OSI layer - and, given the number of edits done to the "OSI model" Wikipedia page to change the layer to which higher-level protocols are assigned, such a mechanism will probably not satisfy everyone.

So, no, there's no way to say "show me only the application layer protocols" in Wireshark.

Guy Harris's avatar
19.9k
Guy Harris
answered 2019-03-17 22:39:13 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Okay, thanks:)

XLastAngelX's avatar XLastAngelX (2019-03-18 05:23:06 +0000) edit
more
  • delete

Is there a way to apply a filter of all the protocols I am looking for? (More than one at a Time)

XLastAngelX's avatar XLastAngelX (2019-03-23 13:22:48 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer