Is there a packet sniffer that can be limited to one single program?

I've been using Wireshark for a while now to analyze a few programs. Is there a way that I can limit Wireshark to sniff only one program开发者_JS百科? Or is there another program that does something like this?

---

tracedump is an open source packet sniffer available for Linux, which can do exactly what was asked in the original question; it's free.

---

Using Wireshark you can filter by destination port number or IP address. For example, Mail clients usually use ports 25 and 110 for sending and receiving emails.

---

If you are sniffing a web application, you should try to use HttpFox, which is a Firefox plugin. It only show net traffic from the current website.

---

Are you looking for Windows or mac...?

If Windows then the answer is yes.You can use Microsoft Network Monitoring tool..

But for mac i did not find any useful tool yet...am still searching...

In mac OS X you can use the following command and that will give you the list of ports used by the application.

    lsof -i |grep firefox|grep Established|awk -F "[ :]*" '{print $10}' |cut -c 1-5 >>/Users/..../Desktop/name.txt

Use these ports to filter the wireshark pcap...

Done...!