Filter 过滤ip、方法及其它_Filter_Wireshark

Filter 过滤ip、方法及其它

filter

Filter 过滤ip、方法及其它,filter,wireshark,Filter,Wireshark,我试图过滤掉ip、方法（GET和POST），然后过滤掉包含特定字符串的http数据。过滤器如下所示： http.request.method == "GET" && http.request.method == "POST" && ip.src == 10.1.5.8 && http contains "facebook" (http.request.method == "GET" or http.request.method == "POST"

我试图过滤掉ip、方法（GET和POST），然后过滤掉包含特定字符串的http数据。过滤器如下所示：

http.request.method == "GET" && http.request.method == "POST" && ip.src == 10.1.5.8 && http contains "facebook"

(http.request.method == "GET" or http.request.method == "POST") and (ip.src == 10.1.5.8 or ip.src == 10.1.5.2 or ip.src == 10.1.5.3 or ip.src == 10.1.5.4 or ip.src == 10.1.5.5 or ip.src == 10.1.5.7) and (http contains "facebook" or http contains "reddit")

我想按筛选器指定的方式筛选数据，但它不起作用。如果我使用| |而不是&，它会起作用，还会显示其他IP，这是错误的。唯一应该列出的IP是10.1.5.8

我这样解决它：

http.request.method == "GET" && http.request.method == "POST" && ip.src == 10.1.5.8 && http contains "facebook"

(http.request.method == "GET" or http.request.method == "POST") and (ip.src == 10.1.5.8 or ip.src == 10.1.5.2 or ip.src == 10.1.5.3 or ip.src == 10.1.5.4 or ip.src == 10.1.5.5 or ip.src == 10.1.5.7) and (http contains "facebook" or http contains "reddit")