Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to filter by IP address in Wireshark?

Tags:

wireshark

I tried dst==192.168.1.101 but only get :

Neither "dst" nor "192.168.1.101" are field or protocol names.  The following display filter isn't a valid display filter: dst==192.168.1.101 
like image 616
Alan Avatar asked Oct 28 '10 13:10

Alan


People also ask

How do I apply filters in Wireshark?

That's where Wireshark's filters come in. The most basic way to apply a filter is by typing it into the filter box at the top of the window and clicking Apply (or pressing Enter). For example, type “dns” and you'll see only DNS packets. When you start typing, Wireshark will help you autocomplete your filter.

What are the two main filters in Wireshark?

There are basically two types of filters in Wireshark: Capture Filter and Display Filter. There is a difference between the syntax of the two and in the way they are applied.


1 Answers

Match destination: ip.dst == x.x.x.x

Match source: ip.src == x.x.x.x

Match either: ip.addr == x.x.x.x

like image 107
The Archetypal Paul Avatar answered Oct 26 '22 23:10

The Archetypal Paul