Wireshark-users: Re: [Wireshark-users] website log
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Mon, 11 Sep 2006 23:29:51 -0700
Tony Reinke wrote:
Is there a good way to filter wireshark to only capture the website that either one machine/ip or all machines/ips is/are going to?
If you know all the IP addresses or host names for that website (note that it might have a different server serving up images, for example), you could try a capture filter such as 

	host host1 or host host2 or host host3 or...
where "host1", "host2", etc. are the host names or IP addresses of the hosts in question. 

If you want to capture only the traffic to or from one machine, do

	host {that machine} and (host host1 or host host2 or host host3 or...)