Wireshark · Wireshark-users: Re: [Wireshark-users] pcap filter for ingress egress selection

[M Holt <m.iostreams@xxxxxxxxx>]

ip.src or ip.dst
tcp.srcport or tcp.dstport
udp.srcport or udp.dstport

is that what you are looking for?

On Fri, Jun 24, 2011 at 2:10 AM, Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx> wrote:
> Hello,
>
> Are there any pcap filter for selecting packets according to their
> direction. My solution was using "ether dst" or "ether src". hoıwever
> this depends on knowing MAC address of the interface. I want to ask
> whteter there is another way of selection of ingress and egresss
> packets seperately.
>
> Regards,
>
>
> --
> Oguz YILMAZ
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe