Wireshark · Ethereal-users: Re: [Ethereal-users] Only Sniffing ONE Machine

[Guy Harris <gharris@xxxxxxxxx>]

On Sun, Jun 02, 2002 at 01:34:24PM -0500, Jim Hale wrote:
> Is there a way to setup a filter so that Ethereal only looks at ONE IP
> on the network?

The standard way of doing that with applications that use libpcap for
packet capturing, such as tcpdump and Ethereal, is

	host {hostname}

or

	host {IP address}

where "{hostname}" is the name of the host and "{IP address}" is the IP
address of the host.  That'll show all traffic to or from that host.