I tried dst==192.168.1.101
but only get :
Neither "dst" nor "192.168.1.101" are field or protocol names. The following display filter isn't a valid display filter: dst==192.168.1.101
That's where Wireshark's filters come in. The most basic way to apply a filter is by typing it into the filter box at the top of the window and clicking Apply (or pressing Enter). For example, type “dns” and you'll see only DNS packets. When you start typing, Wireshark will help you autocomplete your filter.
There are basically two types of filters in Wireshark: Capture Filter and Display Filter. There is a difference between the syntax of the two and in the way they are applied.
Match destination: ip.dst == x.x.x.x
Match source: ip.src == x.x.x.x
Match either: ip.addr == x.x.x.x
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With