Wireshark-users: Re: [Wireshark-users] Filter for all data to a Port?

From: "Behdad Forghani" <behdad.forghani@xxxxxxxxxxxxxx>
Date: Tue, 3 Feb 2009 16:59:28 -0500

Are the MAC addresses the same, if not, you can filter based on the MAC address? Let me know if it works I am curious.

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of rkruz@xxxxxxx
Sent: Tuesday, February 03, 2009 3:39 PM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Filter for all data to a Port?

 

Im using Ethereal. When two ports are mirrored and combine to a mirroring port......can Ethereal filter the data on the mirroring port to view just the packets to one of the mirrored ports? Further can that data be filtered to view only TX or RX packets?. Any help on how to set up a filter for that would be appreciated.

Thank you

T