Whireshark alle IP-Adressen aus cap Datei auslesen mit vorgefertigtem Filter

Alle Ziel-IP Addressen auslesen geht leider nicht in einem Schritt. Hierfür wird Whireshark und Excel benötigt

*.cap Datei in Whireshark laden.

Vorfilter anwenden: (IP6 und Broadcast etc entfernen für eine bessere Übersicht)
Menü: Datei -> Kopfdaten entfernen und folgendes im Dialogfenster einfügen

!(ipv6 || ip.addr==224.0.0.0/4 || _ws.col.protocol=="HomePlug AV" || _ws.col.protocol=="LLDP"

|| eth.dst==01:80:c2:00:00:0e || eth.dst==ff:ff:ff:ff:ff:ff || _ws.col.protocol=="ARP"
|| (ip.src==192.168.177.0/24 && ip.dst==192.168.177.0/24))

Datei sichern als Wireshark *.pcapng

Spaltenansicht auf Source reduzieren
# Rechtsklick auf Spaltenkopf und alle anderen ausklicken
Ein CSV-Datei erstellen
# Menü: Datei -> Paketselection machen -> Als CSV..
Duplikate entfernen (in Excel)
# CSV öffnen
# Spaltenkopf B markieren und Zellen als Text formatieren
# Spalten Kopf A markieren & kopieren (STRG-C)
# Zelle B1 aktivieren und einfügen (STRG-V)
# Spalte A löschen
# Zelle A1 markieren und im Menü: Daten -> Duplikate entfernen

Vorgefertigter Filter nach einer Windows 11 prof. Neuinstallation

IP	IP-Range	Wer	Info	IP Einzeln	DNS

134.120.195.249		Akamai Technologies, Inc.
13.107.253.45		Akamai Technologies, Inc.
150.171.70.254		Akamai Technologies, Inc.
2.21.79.26		Akamai Technologies, Inc.
2.22.89.20		Akamai Technologies, Inc.
20.223.36.55		Akamai Technologies, Inc.
20.31.61.205		Akamai Technologies, Inc.
204.79.197.222		Akamai Technologies, Inc.
23.11.206.65		Akamai Technologies, Inc.
23.53.41.243		Akamai Technologies, Inc.
23.53.42.26		Akamai Technologies, Inc.
52.85.65.70		Akamai Technologies, Inc.
	184.24.77.0/24	Akamai Technologies, Inc.
	23.216.77.0/24	Akamai Technologies, Inc.		23.216.77.147
	23.2.13.0/24	Akamai Technologies, Inc.		23.2.13.26
	2.21.78.0/23	Akamai Technologies, Inc.
	2.22.89.0/24	Akamai Technologies, Inc.
	173.222.108.0/23	Akamai Technologies, Inc.		173.222.108.226
	184.24.77.0/24	Akamai Technologies, Inc.		184.24.77.54
	2.21.22.0/24	Akamai Technologies, Inc.		2.21.22.170
	23.32.100.0/22	Akamai Technologies, Inc.		23.32.101.182
	23.53.40.0/22	Akamai Technologies, Inc.		23.53.42.121 23.53.42.179
	92.123.104.0/24	Akamai Technologies, Inc.		92.123.104.38
	96.16.122.0/24	Akamai Technologies, Inc.		96.16.122.69
	142.250.0.0/15	Amazon Data Services NoVa
	18.173.152.0/21	Amazon Data Services NoVa
	18.173.184.0/21	Amazon Data Services NoVa
	18.66.192.0/24	Amazon Data Services NoVa
	205.251.198.0/24	Amazon Data Services NoVa
	205.251.198.0/24	Amazon Data Services NoVa
	205.251.199.0/24	Amazon Data Services NoVa
	205.251.197.0/24	Amazon Data Services NoVa
	104.18.80.0/20	Cloudflare, Inc.	Hmm warum?
	104.18.32.0/24	Cloudflare, Inc.	Hmm warum?	104.18.32.137
	192.229.221.0/24	Edgecast Inc.		192.229.221.95
	152.199.21.0/24	Edgecast Inc.		152.199.21.175
	199.232.188.0/22	Fastly, Inc.	Domainhoster ?	199.232.190.172
	34.148.0.0/14	Google		34.149.100.209
	142.250.184.0/24	Google
	142.251.36.0/24	Google
	142.251.36.0/24	Google
	172.217.23.0/24	Google
	216.58.206.0/23	Google
	34.104.0.0/14	Google
	34.108.0.0/14	Google
	34.116.0.0/14	Google		104.18.87.42 104.18.32.137
	34.120.0.0/14	Google
	34.160.0.0/16	Google
	34.32.0.0/11	Google
	172.217.16.0/24	Google
	8.8.8.0/24	Google
	34.120.0.0/14	Google		34.120.208.123
	34.160.0.0/16	Google		34.160.144.191
	35.244.0.0/16	Google		35.244.181.201
	66.102.1.0/24	Google		66.102.1.188
	20.0.0.0/11	Microsoft
	208.84.0.0/21	Microsoft
	4.144.0.0/12	Microsoft		4.151.228.221
	52.113.194.0/24	Microsoft		52.113.194.132
	13.104.0.0/14	Microsoft		13.107.246.45
	13.107.42.0/24	Microsoft		13.107.42.16
	13.107.5.0/24	Microsoft		13.107.5.93
	20.184.0.0/13	Microsoft		20.190.159.23 20.190.160.22
	20.0.0.0/11	Microsoft		20.31.169.57
	204.79.197.0/24	Microsoft		204.79.197.203	a-0003.a-msedge.net
	40.112.0.0/13	Microsoft		40.113.110.67
	40.126.0.0/18	Microsoft		40.126.31.69
	51.124.0.0/16	Microsoft		51.124.78.146
	52.96.0.0/12	Microsoft		52.109.32.97 52.109.76.240 52.109.89.117
	217.20.57.0/24	Qwilt INC	Werbung

!(ip.addr==134.120.195.249 || ip.addr==13.107.253.45 || ip.addr==150.171.70.254

|| ip.addr==2.21.79.26 || ip.addr==2.22.89.20 || ip.addr==20.223.36.55

|| ip.addr==20.31.61.205 || ip.addr==204.79.197.222 || ip.addr==23.11.206.65

|| ip.addr==23.53.41.243 || ip.addr==23.53.42.26 || ip.addr==52.85.65.70

|| ip.addr==184.24.77.0/24 || ip.addr==23.216.77.0/24 || ip.addr==23.2.13.0/24

|| ip.addr==2.21.78.0/23 || ip.addr==2.22.89.0/24 || ip.addr==173.222.108.0/23

|| ip.addr==184.24.77.0/24 || ip.addr==2.21.22.0/24 || ip.addr==23.32.100.0/22

|| ip.addr==23.53.40.0/22 || ip.addr==92.123.104.0/24 || ip.addr==96.16.122.0/24

|| ip.addr==142.250.0.0/15 || ip.addr==18.173.152.0/21 || ip.addr==18.173.184.0/21

|| ip.addr==18.66.192.0/24 || ip.addr==205.251.198.0/24 || ip.addr==205.251.198.0/24

|| ip.addr==205.251.199.0/24 || ip.addr==205.251.197.0/24 || ip.addr==104.18.80.0/20

|| ip.addr==104.18.32.0/24 || ip.addr==192.229.221.0/24 || ip.addr==152.199.21.0/24

|| ip.addr==199.232.188.0/22 || ip.addr==34.148.0.0/14 || ip.addr==142.250.184.0/24

|| ip.addr==142.251.36.0/24 || ip.addr==142.251.36.0/24 || ip.addr==172.217.23.0/24

|| ip.addr==216.58.206.0/23 || ip.addr==34.104.0.0/14 || ip.addr==34.108.0.0/14

|| ip.addr==34.116.0.0/14 || ip.addr==34.120.0.0/14 || ip.addr==34.160.0.0/16

|| ip.addr==34.32.0.0/11 || ip.addr==172.217.16.0/24 || ip.addr==8.8.8.0/24

|| ip.addr==34.120.0.0/14 || ip.addr==34.160.0.0/16 || ip.addr==35.244.0.0/16

|| ip.addr==66.102.1.0/24 || ip.addr==20.0.0.0/11 || ip.addr==208.84.0.0/21

|| ip.addr==4.144.0.0/12 || ip.addr==52.113.194.0/24 || ip.addr==13.104.0.0/14

|| ip.addr==13.107.42.0/24 || ip.addr==13.107.5.0/24 || ip.addr==20.184.0.0/13

|| ip.addr==20.0.0.0/11 || ip.addr==204.79.197.0/24 || ip.addr==40.112.0.0/13

|| ip.addr==40.126.0.0/18 || ip.addr==51.124.0.0/16 || ip.addr==52.96.0.0/12

|| ip.addr==217.20.57.0/24)

Whireshark alle IP-Adressen aus cap Datei auslesen mit vorgefertigtem Filter

Hauptmenü

Anmeldeformular