Wireshark-users: Re: [Wireshark-users] Filtering Network address
From: Guy Harris <[email protected]>
Date: Mon, 19 Feb 2007 17:41:58 -0800
On Feb 19, 2007, at 5:20 PM, Muhammad Ghazali wrote:

How can filter to capture only packet coming and going to 1.1.1.1?
If you only want to capture traffic to or from 1.1.1.1, then, when  
capturing, use the capture filter "host 1.1.1.1".
If you already have captured traffic, not all of which is to or from  
1.1.1.1, you would filter the display with the expression Stephen  
Fisher gave.