filter amazon server data from capture

asked 2023-01-07 03:47:36 +0000

bonze82 gravatar image

updated 2023-01-08 20:33:33 +0000

I have a amazon alexa device that has been acting weird lately and would like to filter all of the data to and from that device, removing all of the aws packets from the capture. So far I have eth.addr == device mac and I am custom filtering address ranges from the arin database however this is a very wide range of addresses such as && ip.addr != 52.223.128.0/18 . Is it possible to filter based on dns lookups instead.

edit retag flag offensive close merge delete