This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Capture IP filter

0

Hello all,

Setting the capture filter in wireshark and restarting the capture still shows other IP network traffic....what went south? Here is what I did: started WS went into capture -> Capture Filters -> Cliked New -> filtername = 192.168.2.12 filter string = host 192.168.2.12. then restarted capture but I still see all the other traffic being displayed; Does this mean that the capture only collects data in the log file for x.x.x.12 address but the display continues to show all other traffic or did I do something wrong.

Thanks,

Adrian

asked 01 Jun '12, 12:24

kv7d-data's gravatar image

kv7d-data
1111
accept rate: 0%


One Answer:

1

You have only created a capture filter for later use. You must apply the filter in the capture options dialog.

answered 01 Jun '12, 13:34

grahamb's gravatar image

grahamb ♦
19.8k330206
accept rate: 22%