Thanks I just tried (wlan host A && (not wlan src host B || not wlan dst
host B) , same thing, I see all traffic between A and B.
Mattr.
--------------------------------------------------
From: <j.snelders@xxxxxxxxxx>
Sent: Friday, January 23, 2009 11:06 AM
To: "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx>
Subject: [Wireshark-users] Betr: Need help with capture filters
Hi Matt,
Try this:
wlan host 00:11:11:11:11:11 && (not wlan src host 00:22:22:22:22:22 || not
wlan dst host 00:22:22:22:22:22)
HTH
Joan
On Fri, 23 Jan 2009 10:26:54 -0800 matt roberts wrote:
Hi all,
I'm going crazy trying to filter a mac address from a capture. What I want
is to capture all traffic from and to a mac address, but also exclude all
traffic from that mac address to another specific one. It's a bit like
saying
"show me all traffic from and to box A, but not the traffic that goes from
and to box A and box B).
I've tried multiple combinations like
wlan host 00:11:11:11:11:11 and not wlan host 00:22:22:22:22:22 but I
still
get the traffic between 00:11:11:11:11:11 and 00:22:22:22:22:22.
What would be the syntax to do what I want to do?
Thanks,
Mattr.
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
