Wireshark-users: Re: [Wireshark-users] capture filter for 2 hosts

Date: Thu, 16 Sep 2010 12:10:01 -0400

If you want to capture traffic between the hosts (traffic where both address are present at the same time, source and dest)

host 66.4.57.22 and host 66.4.57.23

if you want to capture traffic for ether host regardless of who they are talking to (traffic where 1 address is ether source or dest)

host 66.4.57.22 or host 66.4.57.23

 

hope that helps

 

 

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of belletjetrekken
Sent: Thursday, September 16, 2010 12:02 PM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] capture filter for 2 hosts

 

How can I write a capture filter for 2 hosts : 66.4.57.22 and 66.4.57.22?  When I tried to put

host 66.4.57.22 66.4.57.23

it errored out

Thank You
Wireshark Newbie