How to exclude traffic between LAN subnets from capturing in Wireshark. We want to capture traffic only between LAN Subnets and subnets residing off the WAN external link and exclude any communication between LAN Subnets
asked 22 Mar '12, 04:14
You do a filter which includes your internal networks as source and excludes them as destination and vice versa.
E.g. if your internal IP's consist of 10.0.0.0/8 addresses you do
(src net 10.0.0.0/8 and not dst net 10.0.0.0/8) or (not src net 10.0.0.0/8 and dst net 10.0.0.0/8)
by the way: if your previous question about filtering was answered please feel free to accept the given answer due to the FAQ of this site
answered 22 Mar '12, 07:37