Wireshark过滤最近的15分钟
我正在通过SSH从我的路由器上的VPN接口捕获实时流量并将其馈入Wireshark,是否有一个过滤器,该过滤器只能在最近的15分钟内显示端点/对话?
我确实找到了有关使用实际时间戳来创建“窗口”过滤器的帖子,但是在找到基于当前时钟时间(如变量)过滤的方法时,没有任何运气。 ( https ://support.solarwinds.com/successcenter/s/article/use time-as-as-a-display-filter-filter-in-wireshark?语言= en_us )
我也找到了一个时间。过滤器引用,但再次没有任何运气来找到使用它的方法 https ://www.wireshark.org/docs/dfref/t/time.html
如果Wireshark不可能要求我所要求的内容,请感谢您如何实现这一目标的任何/所有建议。
I'm capturing live traffic from a vpn interface on my router via ssh and feeding it into wireshark, is there a filter which will only show endpoints/conversations for the most recent 15 minutes?
I did find a post on using actual timestamps to create a "window" filter, but have not had any luck on finding a way to filter based on the current clock time like a variable. (https://support.solarwinds.com/SuccessCenter/s/article/Use-time-as-a-display-filter-in-Wireshark?language=en_US)
I've also found a time.time field in the filter reference but again have not had any luck in finding a way to use it https://www.wireshark.org/docs/dfref/t/time.html
If what I am asking for is not possible with wireshark, would appreciate any/all suggestions on how I can achieve this.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论