Wireshark filtering IP and port

Hello there,

I have these 2 machine with IP 192.168.1.123 and 192.168.1.103. The port of the machine 192.168.1.103 is 2111 and 2112 which it is listening on. How can I just sniff these ip and ports with TCP protocol only.

cheers
Zolf
zolfAsked:
Who is Participating?
 
QlemoConnect With a Mentor Batchelor and DeveloperCommented:
As said, you need to set this up as capture filter. You might have to click on the interface first, then set the filter.
WireShark-Capturefilter.png
0
 
QlemoBatchelor and DeveloperCommented:
A capture (not display!) filter of
   (host 192.168.1.123 or host 192.168.1.103) and tcp portrange 2111-2112
should work. It is not 100% exact but should be sufficient.
0
 
zolfAuthor Commented:
thanks for your comments. But I get red display in the filter meaning our filter is not correct
0
 
zolfAuthor Commented:
Cheers
0
All Courses

From novice to tech pro — start learning today.