Wireshark · Wireshark-users: Re: [Wireshark-users] Having problem tracing multiple ip addresses

[chuck c <bubbasnmp@xxxxxxxxx>]

You will probably get more feedback on the Wireshark Q&A site:

https://ask.wireshark.org/questions/

If you open a question there, include the output of "wireshark -v" or "tshark -v".

These include OS information and version info for the libraries and program.

Maybe throw in "netstat -nr" (if it's not sensitive info) in case packets go out one interface and return on another.

On Fri, Apr 23, 2021 at 1:36 PM Robert Blair <bob-wireshark@xxxxxxxxxxxxx> wrote:

I changed three IoT devices from DHCP to static addresses so I could trace all
three of them.

when I enter "net 192.168.60.201" in the capture filter I get all traffic to
and from the ip.

If I enter "net 192.168.60.200/30" I get all fraffic from the ip addresses but
none going to the ip addresses.  According to the documentation at
<https://wiki.wireshark.org/CaptureFilters> that syntax shoud capture all
traffic going to and from the device.

Any assistance on getting the trace to work will be appreciated.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe