Re: pcap filter for ingress egress selection

[Oguz Yilmaz <oguzyilmazlist () gmail com>]

No. Packets does not target the machine iself. It is a router.

--
Oguz YILMAZ



On Fri, Jun 24, 2011 at 1:12 PM, M Holt <m.iostreams () gmail com> wrote:
> ip.src or ip.dst
> tcp.srcport or tcp.dstport
> udp.srcport or udp.dstport
>
> is that what you are looking for?
>
> On Fri, Jun 24, 2011 at 2:10 AM, Oguz Yilmaz <oguzyilmazlist () gmail com> wrote:
> > Hello,
> >
> > Are there any pcap filter for selecting packets according to their
> > direction. My solution was using "ether dst" or "ether src". hoıwever
> > this depends on knowing MAC address of the interface. I want to ask
> > whteter there is another way of selection of ingress and egresss
> > packets seperately.
> >
> > Regards,
> >
> >
> > --
> > Oguz YILMAZ
> > ___________________________________________________________________________
> > Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> > Archives:    http://www.wireshark.org/lists/wireshark-users
> > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> >             mailto:wireshark-users-request () wireshark org?subject=unsubscribe
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe