This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I need to identify the IP addresses called by an application. Is it possible to configure WireShark to filter for this, and how?

asked 20 Oct '15, 08:15

Jared's gravatar image

Jared
6112
accept rate: 0%


Well, if you know the IP addresses, you can do that

As you seem to be new to Wireshark, please read the Wirshark docs first to understand how it (basically) works.

https://www.wireshark.org/docs/

You can also watch some videos.

https://www.youtube.com/results?search_query=wireshark+tutorial

Then, capture the traffic and filter for the IP addresses like this

ip.addr == a.a.a.a or ip.addr b.b.b.b or ip.addr c.c.c.c

Please replace a.a.a.a, b.b.b.b, etc. with the IP addresses you are looking for.

Regards
Kurt

permanent link

answered 20 Oct '15, 10:12

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 20 Oct '15, 10:13

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×178

question asked: 20 Oct '15, 08:15

question was seen: 1,185 times

last updated: 20 Oct '15, 10:13

p​o​w​e​r​e​d by O​S​Q​A