I want to escape from using MAC address. The same is for IP/Subnet
filters. I think there are flow direction filter for interfaces for
wireshark.
--
Oguz YILMAZ
On Sat, Jun 25, 2011 at 3:32 PM, bart sikkes <b.sikkes@xxxxxxxxx> wrote:
> if you know which network(s) are on which side of the router, you can
> determine what goes in and what comes out the router with ip / subnet
> filters.
>
> bart
>
> On Sat, Jun 25, 2011 at 11:13 AM, Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx> wrote:
>> No. Packets does not target the machine iself. It is a router.
>>
>> --
>> Oguz YILMAZ
>>
>> On Fri, Jun 24, 2011 at 1:12 PM, M Holt <m.iostreams@xxxxxxxxx> wrote:
>>> ip.src or ip.dst
>>> tcp.srcport or tcp.dstport
>>> udp.srcport or udp.dstport
>>>
>>> is that what you are looking for?
>>>
>>> On Fri, Jun 24, 2011 at 2:10 AM, Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx> wrote:
>>>> Hello,
>>>>
>>>> Are there any pcap filter for selecting packets according to their
>>>> direction. My solution was using "ether dst" or "ether src". hoıwever
>>>> this depends on knowing MAC address of the interface. I want to ask
>>>> whteter there is another way of selection of ingress and egresss
>>>> packets seperately.
>>>>
>>>> Regards,
>>>> Oguz YILMAZ
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe