Hello Wireshark-Community, we have two capture points in the network. At Access-SW + WAN-Edge to figure out if there is packet loss inside LAN. At Access there was of course much less traffic captures compared to WAN edge where everything aggregates. Now, on WAN-Edge-Capture I want to filter out all traffic that did not come from access switch. So, is there a way to create Display/BPF Filters that only contains IP conversations from Access-SW capture file to that I can apply this filter to WAN-Edge capture file? I hope you understand my goal to only see conversations that show up in both files?
Thank you!