Display filter for incoming packets
Hello.
I would like to know which display filter we use for capturing only packets sent to my PC.
Thank you in advance!
1 Answer
- Sort by
oldest newest most voted
0
You can use a display or capture filter to filter by the mac address
- Display filter: eth.addr == aa:bb:cc:dd:ee:ff
- Capture filter: ether host aa:bb:cc:dd:ee:ff
By IP address would be also possible
- Display filter: ip.addr == 192.168.0.1
- Capture filter: host 192.168.0.1
If you do your capture on the PC directly, you will see only the packets that arrived at the PC. No capture / display filter is needed in this case unless you want filter out broadcasts and multicasts.
Your Answer
Please start posting anonymously - your entry will be published after you log in or create a new account.
This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.
Comments