How do I listen to my computer only? Because I only want to detect all the connections that my computer is making on a specific app. asked 13 Sep '11, 19:35  chris0990 |
2 Answers:
The easiest way is to create a capture filter for the mac-address of your computer. The syntax would be: (assuming you are on an ethernet) You can find your mac-address in each packet that your computer sends, so pick a packet that you know is from your computer and look into the Ethernet details. answered 13 Sep '11, 23:53  SYN-bit ♦♦ |
Or try turning promiscuous mode off (by starting the capture with the "Options" item in the "Capture" menu and un-checking the "Capture in promiscuous" mode box in the Wireshark GUI, or by passing the "-p" option on the command line in the Wireshark command line, TShark, or dumpcap). answered 14 Sep '11, 00:35  Guy Harris ♦♦ |
That also is an option. However, you will still see multicast and broadcast traffic from other systems, which might or might not be what you want.