Ask Your Question
0

Display filter for incoming packets

asked 2021-01-18 14:35:32 +0000

Nick1 gravatar image

Hello.

I would like to know which display filter we use for capturing only packets sent to my PC.

Thank you in advance!

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-01-18 19:39:41 +0000

JasMan gravatar image

You can use a display or capture filter to filter by the mac address

  • Display filter: eth.addr == aa:bb:cc:dd:ee:ff
  • Capture filter: ether host aa:bb:cc:dd:ee:ff

By IP address would be also possible

  • Display filter: ip.addr == 192.168.0.1
  • Capture filter: host 192.168.0.1

If you do your capture on the PC directly, you will see only the packets that arrived at the PC. No capture / display filter is needed in this case unless you want filter out broadcasts and multicasts.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2021-01-18 14:35:32 +0000

Seen: 3,246 times

Last updated: Jan 18 '21