Capture All Traffic to and from a Specific IP Address in Wireshark

ip.addr == 104.19.230.21

• ip.addr matches packets where the source OR destination IP is 104.19.230.21.

• It works for both IPv4 and IPv6 (though here it’s IPv4).

You could also use:

ip.src == 104.19.230.21 or ip.dst == 104.19.230.21

• If you want to see only traffic from that IP (responses to you), use ip.src == 104.19.230.21.

• If you want only traffic to that IP (your requests), use ip.dst == 104.19.230.21.