Ethereal-users: Re: [Ethereal-users] Only Sniffing ONE Machine

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Sun, 2 Jun 2002 11:41:42 -0700
On Sun, Jun 02, 2002 at 01:34:24PM -0500, Jim Hale wrote:
> Is there a way to setup a filter so that Ethereal only looks at ONE IP
> on the network?

The standard way of doing that with applications that use libpcap for
packet capturing, such as tcpdump and Ethereal, is

	host {hostname}

or

	host {IP address}

where "{hostname}" is the name of the host and "{IP address}" is the IP
address of the host.  That'll show all traffic to or from that host.