{"id":4163,"date":"2021-02-05T15:41:37","date_gmt":"2021-02-05T06:41:37","guid":{"rendered":"\/blog\/?p=4163"},"modified":"2023-09-21T09:26:35","modified_gmt":"2023-09-21T00:26:35","slug":"wireshark-filter-%ec%82%ac%ec%9a%a9-%ec%98%88%ec%a0%9c","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=4163","title":{"rendered":"WireShark Filter \uc0ac\uc6a9 \uc608\uc81c"},"content":{"rendered":"\n<pre class=\"wp-block-code\"><code>\u25a0IP \uc8fc\uc18c\r\nip.src == 10.10.10.74\r\nip.dst == 10.10.10.74\r\nip.addr == 10.10.10.74\r\nip.addr != 10.10.10.74\r\nip.addr != 10.10.10.0\/24\r\n!(ip.addr == 10.10.10.74)\r\n\r\n\u25a0Mac \uc8fc\uc18c\r\neth.src == 00:3f:1e:00:00:23\r\neth.dst == 00:3f:1e:00:00:23\r\neth.addr == 00:3f:1e:00:00:23\r\n\r\n\u25a0TCP \ud3ec\ud2b8\r\ntcp.port == 3306\r\nudp.dstport == 2000\r\nudp.srcport == 2000\r\n\r\n\u25a0Wifi \ud328\ud0b7\r\nwlan.addr == 00:30:f9:00:00:01\r\nwlan.sa == 00:30:f9:00:00:01\r\nwlan.da == 00:30:f9:00:00:01\r\n\r\n\u25a0HTTP \ud328\ud0b7\r\ntcp.dstport == 80 and http\r\n\r\n\u25a0\ud504\ub85c\ud1a0\ucf5c\r\ndns, dhcp, icmp\r\n\r\n\u25a0\ud544\ud130 \uc870\uac74\r\nip.src == 192.168.0.1 &amp;&amp; ip.dst == 192.168.0.2\r\nip.src == 192.168.0.1 || ip.dst == 192.168.0.2\r\nhttp &amp;&amp; (ip.src == 192.168.0.1 || ip.src == 192.168.0.2)\r\n\u2192\ud504\ub85c\ud1a0\ucf5c\uc774 http\uc774\uace0 \ucd9c\ubc1c\uc9c0 \uc544\uc774\ud53c\uac00 192.168.0.1 \uc774\uac70\ub098 192.168.0.2 \uc778 \uac83 \uac80\uc0c9\r\nhttp contains \"naver.com\"\r\n\u2192\ud504\ub85c\ud1a0\ucf5c\uc774 http\uc774\uace0 naver.com\uc774 \ub4e4\uc5b4\uac04 \uac83 \uac80\uc0c9\r\n\r\n\u25a0\ucea1\uccd0 \ubaa9\ub85d \ube44\uc6b0\uae30\r\nCapture > Stop (Ctrl+E)\r\nFile > Close (Ctrl+W)<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[11],"tags":[],"class_list":["post-4163","post","type-post","status-publish","format-standard","hentry","category-computing_network"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4163","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4163"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4163\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4163"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4163"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4163"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}