Revision as of 19:27, 27 July 2017 (view source) Amanjosan2008 (talk \| contribs) (→‎Advanced Packet Filtering) ← Older edit		Revision as of 19:30, 27 July 2017 (view source) Amanjosan2008 (talk \| contribs) (→‎More Filters) Newer edit →
Line 130: Show traffic from 10:27 to 10:29 tshark -r ~~nstrace1~~trace1.cap -t ud \| egrep -E '2017-07-25 10:2[7-9].' Show traffic from 10:27 to 10:29 {{notice\|This filter is not tested successfully yet.}} tshark -r ~~nstrace1~~trace1.cap -t ud '(frame.time >= "July 25, 2017 10:26:00.0") && (frame.time == "July 25, 2017 10:30:00.0")' ;Decode SSL encrypted Traffic: {{notice\|This filter is not tested successfully yet.}} tshark -r ~~nstrace1~~trace1.cap -t ud ~~\| egrep -E '2017-07-25 10:2[7-9].'~~ -o ssl.keys_list:"192.168.3.206","443","http","/home/aman/Downloads/~~NSTrace~~Trace/~~nstrace~~trace.sslkeys" \| egrep -E '2017-07-25 10:2[7-9].' = Misc =

Wireshark: Difference between revisions

Wireshark (view source)