Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Betr: Need help with capture filters

From: "matt roberts" <k141@xxxxxxxxxxx>
Date: Fri, 23 Jan 2009 11:17:09 -0800
Thanks I just tried (wlan host A && (not wlan src host B || not wlan dst host B) , same thing, I see all traffic between A and B.

Mattr.

--------------------------------------------------
From: <j.snelders@xxxxxxxxxx>
Sent: Friday, January 23, 2009 11:06 AM
To: "Community support list for Wireshark" <wireshark-users@xxxxxxxxxxxxx>
Subject: [Wireshark-users] Betr:  Need help with capture filters

Hi Matt,

Try this:
wlan host 00:11:11:11:11:11 && (not wlan src host 00:22:22:22:22:22 || not
wlan dst host 00:22:22:22:22:22)

HTH
Joan


On Fri, 23 Jan 2009 10:26:54 -0800 matt roberts wrote:

Hi all,

I'm going crazy trying to filter a mac address from a capture. What I want
is to capture all traffic from and to a mac address, but also exclude all
traffic from that mac address to another specific one. It's a bit like saying
"show me all traffic from and to box A, but not the traffic that goes from
and to box A and box B).

I've tried multiple combinations like

wlan host 00:11:11:11:11:11 and not wlan host 00:22:22:22:22:22 but I still
get the traffic between 00:11:11:11:11:11 and 00:22:22:22:22:22.

What would be the syntax to do what I want to do?

Thanks,

Mattr.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users

mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe





___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users

mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe