Wireshark · Wireshark-users: Re: [Wireshark-users] Filtering Network address

[Guy Harris <guy@xxxxxxxxxxxx>]

On Feb 19, 2007, at 5:20 PM, Muhammad Ghazali wrote:

> How can filter to capture only packet coming and going to 1.1.1.1?

If you only want to capture traffic to or from 1.1.1.1, then, when  
capturing, use the capture filter "host 1.1.1.1".

If you already have captured traffic, not all of which is to or from  
1.1.1.1, you would filter the display with the expression Stephen  
Fisher gave.