This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

FIltering out my mobile packets

0

How to filter out traffic that I do with my mobile phone while being on computer? I can filter out other computers but I can't do that for phones that are connecting to Internet wirelessly through my router. IPs and MAC are like these:

192.168.1.101 64:A7:69:47:5C:50
192.168.1.119 00:24:1D:91:8D:73
192.168.1.103 E4:B0:21:B5:1E:58 - phone
192.168.1.114 00:18:8B:71:16:7E

Thanks in advance

asked 20 Jul '12, 12:13

Amman's gravatar image

Amman
1●1●1●1
accept rate: 0%

One Answer:

0

what do you mean by "filter out"?

  1. Do you want to see the traffic and it's not in the capture file
  2. You don't want to see the traffic that's already in the capture file

Suggestion for 1:

You will only see that traffic if you captured data at the right place. If your router is also the wirelass AP, you need to capture within the router or on its LAN/WAN interface. If the wireless devices are connected through another AP (access point), you need to capture there.

See this: http://wiki.wireshark.org/CaptureSetup/Ethernet

Suggestion for 2:

Use either a capture filter or a display filter

Capture filter (during capture): not (host 192.168.1.101 or host 192.168.1.119)
Display filter (after capturing): not (ip.addr == 192.168.1.101 or ip.addr == 192.168.1.119)

http://wiki.wireshark.org/CaptureFilters
http://wiki.wireshark.org/DisplayFilters

Regards
Kurt

answered 21 Jul '12, 03:21

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%