Tag: wireshark

Capture All Traffic to and from a Specific IP Address in Wireshark

- by mahmoodramzani 
ip.addr == 104.19.230.21

  • ip.addr matches packets where the source OR destination IP is 104.19.230.21.

  • It works for both IPv4 and IPv6 (though here it’s IPv4).

You could also use:

ip.src == 104.19.230.21 or ip.dst == 104.19.230.21

  • If you want to see only traffic from that IP (responses to you), use ip.src == 104.19.230.21.

  • If you want only traffic to that IP (your requests), use ip.dst == 104.19.230.21.