What are common display filter examples?

Here are some common display filter examples you can use in Wireshark to analyze network traffic effectively:

1. Filter by Protocol

HTTP Traffic:
```
http
```
This filter shows only HTTP packets.
TCP Traffic:
```
tcp
```
This filter displays all TCP packets.
UDP Traffic:
```
udp
```
This filter shows all UDP packets.

2. Filter by IP Address

Specific Source IP:
```
ip.src == 192.168.1.10
```
This filter displays packets originating from the IP address 192.168.1.10.
Specific Destination IP:
```
ip.dst == 192.168.1.20
```
This filter shows packets destined for the IP address 192.168.1.20.
Any Traffic from or to an IP:
```
ip.addr == 192.168.1.10
```
This filter displays packets from or to the IP address 192.168.1.10.

3. Filter by Port Number

HTTP Traffic on Port 80:
```
tcp.port == 80
```
This filter shows TCP packets using port 80, typically used for HTTP.
HTTPS Traffic on Port 443:
```
tcp.port == 443
```
This filter displays TCP packets using port 443, typically used for HTTPS.

4. Combining Filters

HTTP Traffic from a Specific IP:
```
http && ip.src == 192.168.1.10
```
This filter shows HTTP packets originating from the IP address 192.168.1.10.
TCP Traffic to a Specific Port:
```
tcp && tcp.dstport == 22
```
This filter displays TCP packets destined for port 22, commonly used for SSH.

5. Filter by Packet Content

Packets Containing a Specific String:
```
frame contains "example"
```
This filter shows packets that contain the string "example" in their payload.

6. Filter by Time

Packets Captured in a Specific Time Frame:
```
frame.time >= "2023-10-01 12:00:00" && frame.time <= "2023-10-01 12:30:00"
```
This filter displays packets captured between 12:00 PM and 12:30 PM on October 1, 2023.

Conclusion

These common display filter examples can help you quickly isolate and analyze specific types of network traffic in Wireshark. As you become more familiar with the syntax and capabilities of display filters, you can create more complex filters tailored to your analysis needs.

If you're interested in practicing these filters, consider exploring relevant labs on LabEx that focus on packet analysis and filtering techniques. Feel free to ask if you have any questions or need further clarification! Your feedback is always appreciated to help improve these explanations.