Re: [Wireshark-users] Capture Filter Help

2008-02-06 Thread James Pifer
> How'bout looking at the specific locations within the ip-packet for > src address or destination address: > > ip[0xc]==192 and ip[0xf]==11 > > Would match any packet from 192.x.x.11 and > > ip[0x10]=192 and ip[0x13]==11 > > would match and packet to 192.x.x.11. > > So the full filter would

[Wireshark-users] Capture Filter Help

2008-02-06 Thread James Pifer
Hi. I've been googling and using the wiki but I can't figure out if this is possible. I'm trying setup a capture filter to capture only data where the ip address contains a certain part of an ip address. We have a lot of servers on a distributed network that have standard addresses. For example