Wireshark mailing list archives

Re: pcap filter for ingress egress selection


From: bart sikkes <b.sikkes () gmail com>
Date: Sat, 25 Jun 2011 14:32:26 +0200

if you know which network(s) are on which side of the router, you can
determine what goes in and what comes out the router with ip / subnet
filters.

bart

On Sat, Jun 25, 2011 at 11:13 AM, Oguz Yilmaz <oguzyilmazlist () gmail com> wrote:
No. Packets does not target the machine iself. It is a router.

--
Oguz YILMAZ

On Fri, Jun 24, 2011 at 1:12 PM, M Holt <m.iostreams () gmail com> wrote:
ip.src or ip.dst
tcp.srcport or tcp.dstport
udp.srcport or udp.dstport

is that what you are looking for?

On Fri, Jun 24, 2011 at 2:10 AM, Oguz Yilmaz <oguzyilmazlist () gmail com> wrote:
Hello,

Are there any pcap filter for selecting packets according to their
direction. My solution was using "ether dst" or "ether src". hoıwever
this depends on knowing MAC address of the interface. I want to ask
whteter there is another way of selection of ingress and egresss
packets seperately.

Regards,
Oguz YILMAZ
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: