Wireshark · Wireshark-users: [Wireshark-users] Betr: Need help with capture filters

[j.snelders@xxxxxxxxxx]

Hi Matt,

Try this:
wlan host 00:11:11:11:11:11 && (not wlan src host 00:22:22:22:22:22 || not
wlan dst host 00:22:22:22:22:22)

HTH
Joan


On Fri, 23 Jan 2009 10:26:54 -0800 matt roberts wrote:

>Hi all,
>
>I'm going crazy trying to filter a mac address from a capture. What I want
>is to capture all traffic from and to a mac address, but also exclude all
>traffic from that mac address to another specific one. It's a bit like saying
>"show me all traffic from and to box A, but not the traffic that goes from
>and to box A and box B).
>
>I've tried multiple combinations like 
>
>wlan host 00:11:11:11:11:11 and not wlan host 00:22:22:22:22:22 but I still
>get the traffic between 00:11:11:11:11:11 and 00:22:22:22:22:22.
>
>What would be the syntax to do what I want to do?
>
>Thanks,
>
>Mattr.
>___________________________________________________________________________
>Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
>Archives:    http://www.wireshark.org/lists/wireshark-users
>Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe