Wireshark-users: Re: [Wireshark-users] Want to Capture all Packets generated by specific host
From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 29 Jan 2009 06:27:08 +0100
On Thu, Jan 29, 2009 at 09:26:59AM +0500, irfan.sanober@xxxxxxxxxxxxxxxxx wrote:
> 
>    I want to capture all packets a specific host generating,
>    I try to filter it with "host ip" and "src host ip"
>    but when I ping this host wireshark capture the packets but if some else
>    from my network pinging it wireshark only
>    capture the arp resolution packets not ICMP packets
>    , and when this host doing any activity on network like ping to other pc
>    or browsing internet
>    wireshark not capturing any packets at all

Have a look at:

http://wiki.wireshark.org/CaptureSetup  and
http://wiki.wireshark.org/CaptureSetup/Ethernet

Cheers,
    Sake