Host Traffic Filter(Wire Shark)

Some useful Wire Shark filter for host.

Now you config it...

Ethernet Address

eth.dst == ff:ff:ff:ff:ff:ff

eth.dst == ff-ff-ff-ff-ff-ff

eth.dst == ffff.ffff.ffff

IPv4 Address

ip.addr == 192.168.0.1

ip.addr == 129.111.0.0/16

IPv6 Address

ipv6.addr == ::1

Text String

http.request.uri == "https://www.google.com/"

Filtering DNS Traffic

dns.qry.name == "www.petenetlive.com"

HTTP or DNS

Sets a filter to display all http and dns protocols.

TCP Packet

tcp.port==xxx

Sets filters to display all TCP resets

tcp.flags.reset==1

TCP Stream

tcp.stream eq X

Sequence Number

tcp.seq == x

Filters all HTTP GET and POST requests

http.request

For More Filters, Go to Wire Shark... 

Thanks 

Himanshu