Wireshark-users: [Wireshark-users] Need help with capture filters
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "matt roberts" <k141@xxxxxxxxxxx>
Date: Fri, 23 Jan 2009 10:26:54 -0800
Hi all,
 
I'm going crazy trying to filter a mac address from a capture. What I want is to capture all traffic from and to a mac address, but also exclude all traffic from that mac address to another specific one. It's a bit like saying "show me all traffic from and to box A, but not the traffic that goes from and to box A and box B).
 
I've tried multiple combinations like
 
wlan host 00:11:11:11:11:11 and not wlan host 00:22:22:22:22:22 but I still get the traffic between 00:11:11:11:11:11 and 00:22:22:22:22:22.
 
What would be the syntax to do what I want to do?
 
Thanks,
 
Mattr.