Filtering capture files with wire shark

Filter by IP address, source and or destination IP Address

ip.addr==192.168.1.1
ip.src==192.168.1.1
ip.dst==192.168.1.1
(ip.src==192.168.1.1)||(ip.dst==192.168.1.1)
(ip.src==192.168.1.1)&&(ip.dst==192.168.1.1)

To Exclude an IP Address :

!(ip.addr==192.168.1.1)

You may also like...