how to customise filter on wireshark to one ip address on Lan.
Hi, in my Local Area Network have many pc around 200pcs pc, all connect to network. I am a administrator, i need to check on 1 of pc network status(which i mean i want to capture all the packets on this pc.)i try to use wireshark and ethereal to sniffer this pc is ok, but when i customise the "capture filter" i using "IP address 192.168.1.50" this ip address is which pc i would like to capture the all packets, when i start capturing the packets from this ip: 192.168.1.50 than ok just show me my system to this ip system network status, what i want is i want this target ip: 192.168.1.50 system all network activites in&out packets,But i dont know how to setting it to capture all my target ip(system) network traffic packets on wireshark or ethereal. Wireshark & ethereal is it have this function what i want? or any recomemed software?
Thank you.
Last edited by hocheetiong; 12-18-2007 at 11:19 PM.
Reason: Sorry, wrong type on wireshark to wireshare.
|