Wireshark · Wireshark-users: Re: [Wireshark-users] pcap filter for ingress egress selection

[bart sikkes <b.sikkes@xxxxxxxxx>]

if you know which network(s) are on which side of the router, you can
determine what goes in and what comes out the router with ip / subnet
filters.

bart

On Sat, Jun 25, 2011 at 11:13 AM, Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx> wrote:
> No. Packets does not target the machine iself. It is a router.
>
> --
> Oguz YILMAZ
>
> On Fri, Jun 24, 2011 at 1:12 PM, M Holt <m.iostreams@xxxxxxxxx> wrote:
>> ip.src or ip.dst
>> tcp.srcport or tcp.dstport
>> udp.srcport or udp.dstport
>>
>> is that what you are looking for?
>>
>> On Fri, Jun 24, 2011 at 2:10 AM, Oguz Yilmaz <oguzyilmazlist@xxxxxxxxx> wrote:
>>> Hello,
>>>
>>> Are there any pcap filter for selecting packets according to their
>>> direction. My solution was using "ether dst" or "ether src". hoıwever
>>> this depends on knowing MAC address of the interface. I want to ask
>>> whteter there is another way of selection of ingress and egresss
>>> packets seperately.
>>>
>>> Regards,
>>> Oguz YILMAZ