ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] capture filter for 2 hosts

From: Sake Blok <sake@xxxxxxxxxx>
Date: Thu, 16 Sep 2010 18:12:58 +0200
On 16 sep 2010, at 18:01, belletjetrekken wrote:

> How can I write a capture filter for 2 hosts : 66.4.57.22 and 66.4.57.22?  When I tried to put 
> 
> host 66.4.57.22 66.4.57.23

It you would like to see only traffic that is sent between these hosts you need the filter "host 66.4.57.22 and host 66.4.57.23". If you would like to see traffic to and from either of these hosts you can use "host 66.4.57.22 or host 66.4.57.23" or you can shorten it to "host 66.4.57.22 or 66.4.57.23"

Hope this helps,
CHeers,


Sake