tags:

views:

25

answers:

2
Q: 

How to filter by IP address in Wireshark?

I tried dst==192.168.1.101 but only get :

Neither "dst" nor "192.168.1.101" are field or protocol names.

The following display filter isn't a valid display filter:
dst==192.168.1.101
+1  A: 

Try

ip.dst == 172.16.3.255
Kevin Tighe  2010-10-28 13:38:48
+1  A: 

Match destination: ip.dst == x.x.x.x

Match source: ip.src == x.x.x.x

Match either: ip.addr == x.x.x.x

Paul  2010-10-28 13:59:06

related questions

Find simultaneous connection through wireshark
cURL,WireShark. Setting headers to post data and get xml.
Tool for network traffic analysis of a custom protocol
how do you decrypt SSH .pcap file that uses Diffie Hellman ecryption. With public and private keys.
Corruption in the network stack
Can I monitor traffic on my Incoming Dialup connection using Wireshark?
Wireshark ------- Source port: timbuktu-srv2 ?
What is a TCP window update?
How do I go about reverse engineering a UDP-based custom game protocol with nothing other than Wireshark?
wireshark - filter by process/pid
Virtualize Wireshark
Wireshark dissect function
Decoding URL in Wireshark
how to find the packet loss in Wireshark?
Analyze core-dumps created while running wireshark on linux
Identifying characteristics of certain categories network traffic (originating from load balancer or port based NAT)
How to concatenate two tcpdump files (pcap files)
Wireshark Info Filter Help
Can we sniff packets between 2 machines in a network from a third machine using wireshark or ethereal
Ethernet FCS when capturing wth Wireshark under Linux
TCP Socket Server Builds Up CLOSE_WAITs Occasionally Over Time Until Inoperable
What are some good Wireshark tutorials?
wireshark: Capture Data Layer Only
How do you monitor network traffic on the iPhone?
how to clear the wireshark filter combo contents