Wireshark-users: Re: [Wireshark-users] Filtering Network address

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 19 Feb 2007 17:41:58 -0800

On Feb 19, 2007, at 5:20 PM, Muhammad Ghazali wrote:


How can filter to capture only packet coming and going to 1.1.1.1?
If you only want to capture traffic to or from 1.1.1.1, then, when capturing, use the capture filter "host 1.1.1.1".
If you already have captured traffic, not all of which is to or from 1.1.1.1, you would filter the display with the expression Stephen Fisher gave.