Keep in mind that the eth.src_resolved filter is only available since … No. That is an Ethernet MAC address, not an IP address, so you filter it with eth.src, not ip.src.Also, since you're attempting to use the resolved Ethernet address (with the OUI), then you'll actually need to use eth.src_resolved="CompalIn_dc:d9:3e", since eth.src is for unresolved MAC addresses. Use the following display filter to show all packets that contain the specific IP in either or both the source and destination columns: ip.addr = 192.168.2.11. Wireshark display filter where source address in not an ip-address Filtering Specific IP in Wireshark Use the following display filter to show all packets that contain the specific IP in either or both the source and destination columns: ip.addr 192.168.2.11 This expression translates to pass all traffic with a source IPv4 address of 192.168.2.11 or a destination IPv4 address of 192.168.2.11.
0 kommentar(er)
