#network #tcpip #packet #recon #wireshark #subnet
### **Search Queries:**
- With the **+** button on the far right of the input field, you can **add the query to favorites**.
- You can also **drag a field** from the data capture into the query field.
Additionally, when you navigate to **Statistics → Endpoints**, you can see a **detailed summary of the data**.
---
### **Filtering by IP Address:**
`ip.addr == <ipaddress> ip.src == <ipaddress> ip.dst == <ipaddress>`
---
### **Filtering by Subnet:**
`ip.addr == 192.168.178.0/24`
---
### **Filtering by Ports:**
`tcp.port == 80`
**Multiple ports:**
`tcp.port in {80,443,8000..8080}`
---
### **Viewing Conversations:**
1. Click on **Statistics → Conversations**.
→ This will display the **traffic between IP addresses**.
2. In the **columns**, select the correct **IP version** (e.g., **IPv4**).
3. **Right-click** the desired conversation and select **Apply as Filter**.
Zie ook [[Install All Kali Tools on Ubuntu]]