> For the complete documentation index, see [llms.txt](https://jun-wang.gitbook.io/learnjava/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://jun-wang.gitbook.io/learnjava/ji-shu-xue-xi/ji-suan-ji-wang-luo/wireshark-zhua-bao.md).

# Wireshark抓包

## 过滤规则：

```
# 表示只显示TCP协议且源主机IP或者目的主机IP为10.115.24.34的数据包
ip.addr == 10.115.24.34 and tcp
# http协议包含某个字符串
http contains "/testapp/getUserId"
```

## 数据区

* Frame:   物理层的数据帧概况
* Ethernet II: 数据链路层以太网帧头部信息
* Internet Protocol Version 4: 互联网层IP包头部信息
* Transmission Control Protocol:  传输层的数据段头部信息，比如TCP的报文头
* Hypertext Transfer Protocol:  应用层的信息，比如HTTP协议

具体参考

> 参考：
>
> <https://www.cnblogs.com/linyfeng/p/9496126.html>