What I need to see is the TCP messages sent to a port for a given IP. So for example
127.0.0.1:11000
How can I see all the TCP messages being sent to that port?
This has to work with Windows, either Windows 2003 or XP
I have tried WireShark, but I don't know the proper filter.
The soluiton does not have to wireshark, but the solution must cost nothing.
Best Answer
The filter language for Wireshark is taken from tcpdump/pcap-filter. Please click on the link for a reference.
So, for example, to filter on all messages with destination 127.0.0.1:11000 you would use the following expression:
tcp port 11000 and dest host 127.0.0.1.