> Karen Isaacson wrote: > > I'm in a classroom situation learning to use Wireshark and > other forensic tools and I can filter IP addresses with ease > but due to the configuration of the classroom [instructor's > insistence] all workstations are on the same subnet. If I > filter for x.x.x.12, I also get x.x.x.121, .123, etc. >
> > What do I need to add to restrict the IP value to exactly > what I want and not variants on that value? Is there a > wildcard I can use? > What syntax have you tried? As a capture filter it should be: host x.x.x.12 Or a display filter: ip.addr == x.x.x.12 Cheers Greg _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
