This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I was wondering is there a way to monitor a certain ip address or address range? thank you

asked 01 Dec '10, 11:27

keyboard's gravatar image

keyboard
11334
accept rate: 0%


You can only monitor traffic seen on the interface you have Wireshark to capture on. You need to arrange for that traffic to be presented on that interface by whatever means. Usually this will mean port-mirroring on a switch that is carrying the traffic you are interested in.

You can then use capture filters in wireshark to narrow the capture like "host 10.1.2.3" or "net 10.1.2.0/24"

permanent link

answered 01 Dec '10, 20:30

martyvis's gravatar image

martyvis
8911525
accept rate: 7%

ok thank you. I was particularly wanting to watch certain machines but if I watch a network then I should still see everything on that network correct. Including the machine I am wanting to watch?

(13 Dec '10, 06:45) keyboard
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×178
×5
×4
×1

question asked: 01 Dec '10, 11:27

question was seen: 32,122 times

last updated: 13 Dec '10, 06:45

p​o​w​e​r​e​d by O​S​Q​A