This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Filter multiple IPs

0

I want to filter IPs on a .cap file , I use the command ip.addr == 123.456.789 but this only filters out one IP , I was wondering if there was a way to filter out multiple IPs ? thanks

asked 26 Jul '12, 09:04

helloworld0722's gravatar image

helloworld0722
10779
accept rate: 0%


2 Answers:

3

ip.addr==x.x.x.x || ip.addr==y.y.y.y || ip.addr=z.z.z.z

answered 26 Jul '12, 09:14

Jim%20Aragon's gravatar image

Jim Aragon
7.2k733118
accept rate: 24%

It works ,thanks

(26 Jul '12, 09:19) helloworld0722

2

Another way, if they are contiguous, is to use:-

ip.addr==10.10.10.10/24

This would display 10.10.10.1 - 10.10.10.254

This is also the way to filter on a subnet.

answered 26 Jul '12, 11:05

KeithFrench's gravatar image

KeithFrench
121115
accept rate: 0%

Ok thank you !

(26 Jul '12, 12:28) helloworld0722