Tuesday, 5 February 2013

What is Wireshark filter for SSDP protocols?

For SSDP protocols there is no separate Wireshark filter. We have to use either of the following two:


1) (udp.dstport==1900)

2) http




1 comment:

  1. The best filter I have found to show only SSDP is this:

    (udp contains "HTTP/1.1") and ((udp contains 0a:53:54:3a) or (udp contains 0a:59:54:3a))

    The hex is for "ST:" and "NT:" at the beginning of hte line.

    ReplyDelete

Related Posts Plugin for WordPress, Blogger...