Can I Display Bluetooth packets from only two MAC Addresses?

asked 2025-10-03 02:32:41 +0000

LMIRANDA
1 ●1 ●1

updated 2025-10-03 13:35:50 +0000

Hello:

I want to capture packets from only two Bluetooth MAC addresses. I have two MAC addresses: 6e:ec:5e:4b:a2:22 and d6:97:f0:86:01:0b.

I tried... eth.src == 6e:ec:5e:4b:a2:22 || eth.src == d6:97:f0:86:01:0b and eth.src == 6e:ec:5e:4b:a2:22 or eth.src == d6:97:f0:86:01:0b

but the but the Display Filter does not allow!

Is there a solution for my problem?

Thansk in advance.

Luiz Rocha

Comments

You mention "capture packets" and then later on a display filter. Capturing and Display have different filtering languages so can you confirm if you want to filter the capture or the display?

grahamb ( 2025-10-03 06:22:34 +0000 )edit

I want to filter the Display

LMIRANDA ( 2025-10-03 13:35:28 +0000 )edit

add a comment

answered 2025-10-03 14:14:52 +0000

Chuckc
3133 ●6 ●648 ●20

The original filter only included the etc.src field. Should it also include eth.dst?

(eth.src == 6e:ec:5e:4b:a2:22 and eth.dst == d6:97:f0:86:01:0b) or (eth.dst == 6e:ec:5e:4b:a2:22 and eth.src == d6:97:f0:86:01:0b)

Here is a filter created with Statistics -> Conversations -> Ethernet.
(WSUG: 8.5.1. The “Conversations” Window)

Right click on a conversation and Apply as Filter or Prepare as Filter for the conversation type you're interested in. A <-> B

eth.addr==6e:ec:5e:4b:a2:22 && eth.addr==d6:97:f0:86:01:0b

edit flag offensive delete link

Comments

I'm a new Wireshark user. I've been using it for a few days. Thank you for your help.

LMIRANDA ( 2025-10-03 15:15:54 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Can I Display Bluetooth packets from only two MAC Addresses?

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

Can I Display Bluetooth packets from only two MAC Addresses? edit

Comments

1 Answer

Comments

Your Answer

Question Tools

Stats

Can I Display Bluetooth packets from only two MAC Addresses?