| 1 | initial version |
You can use a regular expression on ip.host. This is the resolved version of ip.addr and with resolving disabled for the network layer, it becomes the string representation of ip.addr. I did exactly the same thing for anything 10.x.24.x.
In your case you can use ip.host matches "^172\\.16\\..*\\.37$" (make sure you turn off network layer name resolving)