This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

How to exclude traffic between LAN subnets from capturing in Wireshark

0

How to exclude traffic between LAN subnets from capturing in Wireshark. We want to capture traffic only between LAN Subnets and subnets residing off the WAN external link and exclude any communication between LAN Subnets

asked 22 Mar '12, 04:14

fbaig's gravatar image

fbaig
1334
accept rate: 0%


One Answer:

1

You do a filter which includes your internal networks as source and excludes them as destination and vice versa.

E.g. if your internal IP's consist of 10.0.0.0/8 addresses you do

(src net 10.0.0.0/8 and not dst net 10.0.0.0/8) or (not src net 10.0.0.0/8 and dst net 10.0.0.0/8)

by the way: if your previous question about filtering was answered please feel free to accept the given answer due to the FAQ of this site

answered 22 Mar '12, 07:37

Landi's gravatar image

Landi
2.3k51442
accept rate: 28%