HAMY

WireShark: Find the TCP Port Numbers being Used for a Connection

Date: 2015-08-26 |

**Problem: **I’m using WireShark to monitor my network traffic and I want to see what port numbers are being used for a particular TCP connection I’ve captured.

Solution:

  1. Find the desired connection packet in WireShark
  2. In the details section at the bottom, find “Transmission Control Protocol”
  3. Next to that, you’ll see the source and destination ports

or

  1. Find the desired connection packet in the WireShark list view
  2. Look in the info section
  3. There should be two numbers of the form “####->#####”.  This indicates the source port number and the destination port number

Example:

Want more like this?

The best / easiest way to support my work is by subscribing for future updates and sharing with your network.