I've been tasked to audit in/outbound traffic at our site, but I don't know much about Wireshark. I understand how to set up a capture filter for broad protocols (IP only or tcp, udp, icmp, etc), but how do I set it up so it only captures specific CONTENT types? For example:
-ignore network chatter (dns/icmp/handshakes/etc) -Image files (jpg/gif/png), audio (mp3), video (lots of types), archives (rar/zip/tar) -Pages & sessions -IMs
Bonus points if it's easy to see what's outbound.