Wireshark - IP Address, TCP/UDP Port Filters

[animatrix7]

Great vid man, I am starting to use wireshark heavily as I am in IT Security, much aprreciated. Clear and cocise!

[DrunkenCheetahh]

what program are u using to do this?

[packetanalyzer]

@DrunkenCheetahh I am using Wireshark as the protocol analyzer and I used Camtasia Studio to record the video on my computer.

[FlaverFx]

Do you know how to analyse browser protocol in wireshark?

[DeafeningSounds]

how do i go about making wireshark show only UPD protocols?.. i know i can sort it by clicking on protocols .. but i need a command/filter as i have lots of i.p address..

[MsDjMAC]

if some one was using this on facebook e.g my freind could he get my ip if i was on facebook chatting 2 him just wonderd coz he was saying he could but i dont belive him

[MerCanmca]

Thank you for this !!!!!!!!!!!!!

[nicolascage4ever]

i need some help over here

i have a lot of data between a server and client using different ports, how can i know these ports without looking to all these packets !

[zNaaaayDz]

is it possible to put the ip and the port e.g. 184.154.47.140:28960

so i can find peoples ip's in cod4 servers?

[okok3358]

Thank you for your sharing.. 

[thehazord]

So I'm kinda stuck, i would like to FIND IP addresses of people I have been with on Xbox LIVE, because when i get DDOSed i want to know who did it...

[dnfwme]

It was great and helpful. I always forget about port filters. Thanks for so simple way of explaining.

[dyldaboss]

i have netgear i neeed 2 change my ip adress, i dont kno my internet connection password but im wireless internet and i need to change my new ip adress can u help me?

[deallis1]

Can you help me with this "Somebody is scanning your computer. Your computer's TCP ports: 8085, 9090, 27977, and 8118 have been scanned from 58.218.199.147.."

[packetanalyzer]

Looks like someone from China is scanning your computer. First make sure you have some sort of firewall protecting your computer, either hardware or software. Next you can use a tool like currports from nirsoft.net to find out if these ports are open on your computer and which application opened them.

[SasukeLoveEmosakura]

@deallis1 58.218.199.147 that ip is from china belive it or not and the network name from that ip adreses is CHINANET-JS Fucking chinese bricks lol

[PushXOR]

How come I have an active protocol running called SSDP, even when I set the filter to h t t p?

[vendorvoicemedia]

Search hunch dot com - "What is the best tool to quickly analyze network packets?" - Try ACE Analyst for orders of magnitude faster packet analysis.

[electromagnetshit]

plzz i need help, i can't turn my tcp on to play online games

[theguyi26]

Youtube's new "like" system is epic fail, because now I just automatically click thumbs down to any video before it even begins so I can see the rating score and decide whether or not to watch the video.

[Mast3rTeam]

can i find some IP adresses via xfire / msn and some online games?

[HeLpErNaThAn]

So if I do this I can open UDP ports?

[MaleXachi]

Hi, I want something. I would come back from a irc server password server, which can be retrieved via tcp stream, but I do not know how and where you can see, can you explain me miss? Irc server that is password protected, but you can log in through port 80, so via a Java applet.

[norathpent24]

Hi, I play Counter Strike: Source and I cannot seem to sort the traffic to get IP addresses from that program from being online. Do you know how I might be able to di this? Please reply on here or messege me, thanks.

[pyroger101]

great thanks!

[LyleMod]

hey man can you help me with this fukin program im having troubles with it an i have a task from work to learn how to use this to Reset and get into routers for customers! we do a door to door service and the boss loves this program so i want to get as much knowledge as possible on it

[hightvids]

yo I just sierching the fucking bich UDP port! and I don't know were is it! so sam1 help me please reply!

[cekothepro]

Thanks for your videos, these were very useful! :)

[marianitodeacero]

Thanks a lot for this kind of videos it helped me a lot!!!! great job!!!

[imsosexysosexy]

Mark, I get probed continually on my NAT router with pakets that contains this in text :

d1:ad2:id20:[DA 17 BD F0 8D]

[D3 FB 8B DB BC 0F]2[A7]w[07 86];[1D]

6:target20:[DA]?[BF 15]x[D3]O[1B FC B7]zi[B4 D3 FC 84]@[98]Q[BF]e1:q9:find_node1:­t4:[1E]P[00 00]1:v4:UT![C2]1:y1:qe

Port UDP 21235

[packetanalyzer]

That is BitTorrent. Even if you uninstall BT, you will still see that traffic, you have to uninstall the DNA application to get rid of all of that traffic.

[imsosexysosexy]

sweet thanks mark

[warlockd]

@packetanalyzer Thanks:P I have been panicking for the last few hours on why I was getting hit by a port I don't know:P Love wireshark.

[imsosexysosexy]

What I meant to make things more clear is

I send a ping packet to a target IP on the internet. Now if I capture these packets I would see my own IP lets say 10.20.1.2 as the source sending the packet. Lets say the target I was pinging was also capturing, would he be able to get my internal IP from the capture?

Hope I made it more understandable

[packetanalyzer]

I'll make an assumption here based on the IP address that you used and that is you are NATing your traffic. This being the case, the destination device will not see your internal IP address, but instead the external IP address of your NAT router.

[imsosexysosexy]

would that be the same if I used a DMZ port?

and I set the DMZ as default server under NAT'ing in my router?

[imsosexysosexy]

Thanks, and if I disable NAT would it then pass my internal IP ?

[imsosexysosexy]

Great video, I have a question though. I'm a newbie at packet sniffing btw.

When I see my own IP as a source sending a packet to an external IP on the internet is my internal IP then sniffable (so lets see the target) can obtain info around my internal network??

Thanks