Filtering packets in Wireshark

-
When you open Wireshark, there is a Option for Filter on top. However, that doesn't seem to work.
Instead, go to Capture->Options.
Next, in the field adjacent to 'Capture Filter', type in the filter. This could be 'host 192.168.123.233' for example. The host command filters packets to/from the give ip.


Comments

  1. kanAVtarJune 16, 2010 at 3:08 PM

    use 'src ' for filtering packets which originate from a particular IP.

    ReplyDelete

Post a Comment

Popular posts from this blog

endmenu in different file than menu?

-
So I was adding my driver to the Linux kernel. Made a new Kconfig file and added 'menu' and 'endmenu' sections. But when I compiled the kernel I got an error saying 'endmenu in different file than menu'. Reason: There has to be a new line character after endmenu in your Kconfig file!
Read more

Multi Threading in Android

-
It is good practice to not do computation intensive work on the UI Thread. In fact starting from HoneyComb, you get a NetworkOnMainThread exception if you try and do any network processing on the main thread. So we should do background work in a new thread. One thing we need to consider is that only the UI thread can update the UI, so when our background thread wants to update the UI, we need a means to communicate between threads. Actually even your background thread can update the UI, but this is really dangerous and your app can crash! Android provides a lot of multi threading constructs for us. AsyncTask is by far the easiest way of multithreading in Android. When you create a new AsyncTask object the framework creates a new thread for you and provides methods to communicate with the UI. No threads, no handlers and no Executors (Because it uses these classes internally)! So why not use AsyncTask all the time? Well, because these are suited for background work that typically l...
Read more

A binary with debug symbols with the Android NDK

-
First go into the Android.mk file in your jni folder and add this line: LOCAL_CFLAGS  += -g This is going to enable the debug compile option. You might have a separate option for logging more data. Next go into Application.mk and uncomment this line: APP_OPTIM := debug (or add it if it isnt there) This should be sufficient. Now when you run the ndk-build (You can run ndk-build V=1 to enable the verbose option), you should get the debuggable binaries. For some reason the binary I get in the libs/armeabi folder is not the debuggable one, this one has its debug options stripped out. To get the debug one grab it from obj/local/armeabi.
Read more