| 过滤器 | ip.addr/tcp.port/http.*/dns.* |
|---|---|
| 会话 | Follow → TCP/UDP Stream |
| 统计 | Conversations/Protocol Hierarchy |
| 解密 | 持有 SSLKEYLOGFILE 等密钥日志时 |
过滤器与操作示例
过滤器与操作示例
ip.addr == 10.0.10.5 && tcp.port == 443
http.request.method == "POST"
dns.qry.name contains "example.com"
Follow → TCP Stream
Statistics → Conversations / Protocol Hierarchy
TLS 解密：Preferences → Protocols → TLS → (Pre)-Master-Secret logpcap 常含 Cookie 与个人数据：加密存放、限权访问、到期销毁。