Wireshark-users: Re: [Wireshark-users] Help on capturing packets for a particular host
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 30 Jul 2008 10:09:41 -0700

On Jul 30, 2008, at 9:50 AM, Abhik Sarkar wrote:


I think if you also added a -f argument with "tcp port
whatever_port_your_webserver_listens_on", I think it should at least
not capture the other traffic.


And if the -f argument you add is
-f "host 10.146.175.235 and tcp port whatever_port_your_webserver_listens_on"
(where "whatever_port_your_webserver_listens_on " is probably 80...) it will only capture Web traffic to or from 10.146.175.235. If you need more than one port, try, for example, 

	-f "host 10.146.175.235 and (tcp port 80 or tcp port 443)"

if you need ports 80 and 443.