Hi.I need to see packets coming from OR going to ip xxx.xxx.xxx.xxx using capture filter but src host capture filter not working for me! I write src host 192.168.1.100 (My IP) and I capture traffic to or from my IP address but I want to capture only traffic from this IP.Also, is there any way to see the capture process, the number of captured packets, etc as in Tshark (linux terminal): []# tshark -i eth1 dst host 207.35.208.194 or src host 207.35.208.194 Capturing on eth1 0.000000 208.77.1.33 -> 207.35.208.194 SIP Status: 200 OK (1 bindings) 7.475218 208.77.1.33 -> 207.35.208.194 SIP Status: 200 OK (1 bindings) 6 packets captured Thanks in advance! asked 06 Mar '13, 09:49  zig69 |
One Answer:
To limit captures for packets to or from a host use the capture filter I don't understand the second part of the question, are you talking about the Wireshark GUI? answered 06 Mar '13, 09:56  grahamb ♦ |
Ok, thanks but I need to capture only traffic from my IP, and yes, I am talking about WS GUI (I see all traffic to and from my host in GUI using src host a.b.c.d and I need to see only traffic exiting from my host... Thanks again!
instead of src host x.x.x.xx please use src x.x.x.x
Both forms are working properly for me on PortableApps version 1.8.5.