---
# System prepended metadata

title: Wireshark

---

# Wireshark
[TOC]

## 過濾指定封包
- ![image](https://hackmd.io/_uploads/Hkj63ydZR.png)
- ![image](https://hackmd.io/_uploads/BkoZR1ub0.png)
    - `host` 前面可以加上 `src` or `dst` 代表來源或目的地
- ![image](https://hackmd.io/_uploads/HkuJyeObR.png)

## 看這次 tcp stream 的資料
- ![image](https://hackmd.io/_uploads/ryW8pJO-R.png)
- http
    - ![image](https://hackmd.io/_uploads/BkH5aJ_-C.png)
    - 紅色是 request 的資料，藍色是 response 的資料
- https
    - ![image](https://hackmd.io/_uploads/By0jpy_-0.png)


## 統計資料
- ![image](https://hackmd.io/_uploads/H16vA1uWR.png)
- ![image](https://hackmd.io/_uploads/SJvK0kdZR.png)
    - 可依據不同資料排序

[第三屆題目](https://www.youtube.com/watch?v=tpRR7EMq3Qc&list=PLY4BHIA7oFqvu41PD4b-sV9lJrAGE_1HD&index=4)


## 輸出非文字的檔案
- ![image](https://hackmd.io/_uploads/rygSJe_WA.png)



[第三屆題目](https://www.youtube.com/watch?v=JrVokJGAsOM&list=PLY4BHIA7oFqvu41PD4b-sV9lJrAGE_1HD&index=2)



## 第二屆題目

[第二屆題目](https://www.youtube.com/watch?v=YHxbdi0LEYU)
