Wireshark-users: Re: [Wireshark-users] capture filter for 2 hosts
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 16 Sep 2010 18:12:58 +0200
On 16 sep 2010, at 18:01, belletjetrekken wrote:

> How can I write a capture filter for 2 hosts : 66.4.57.22 and 66.4.57.22?  When I tried to put 
> 
> host 66.4.57.22 66.4.57.23

It you would like to see only traffic that is sent between these hosts you need the filter "host 66.4.57.22 and host 66.4.57.23". If you would like to see traffic to and from either of these hosts you can use "host 66.4.57.22 or host 66.4.57.23" or you can shorten it to "host 66.4.57.22 or 66.4.57.23"

Hope this helps,
CHeers,


Sake