This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

capture IP

0

I want to capture data/traffic from specific IP address (xxx.xxx.xxx.xxx) in the same LAN. How do I capture in Wireshark?

Thanks

asked 18 Aug '15, 12:52

wireshark%20questions's gravatar image

wireshark qu...
6112
accept rate: 0%


One Answer:

0

First read the following wiki regarding how to setup the environment to properly capture on a wired Ethernet network:

https://wiki.wireshark.org/CaptureSetup/Ethernet

Then apply the following capture filter to only capture from IP address xxx.xxx.xxx.xxx:

host xxx.xxx.xxx.xxx

For example, to only capture traffic to/from 192.168.1.10

host 192.168.1.10

answered 18 Aug '15, 13:36

Amato_C's gravatar image

Amato_C
1.1k142032
accept rate: 14%