Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am not interested in any information about network activity from any address that starts with 192.168. How can I make Wireshark hide those?

share|improve this question
up vote 3 down vote accepted

Enter this into the Filter: field:

!(ip.src >= 192.168.0.0 and ip.src <=192.168.255.255)

and click on Apply. If you want to hide activity going to those addresses as well, change ip.src to ip.addr.

share|improve this answer
    
!(ip.src == 192.168.0.0/16) will probably work as well. – user164970 Sep 13 '14 at 18:25

If you know before you take the recording you will not want those messages, you can use a Capture Filter to avoid getting them in the first place. Specify it in the "Capture Options" dialog. These use a different syntax to the Display Filters like in the previous answer.

not src net 192.168.0.0 mask 255.255.0.0

share|improve this answer
    
not src net 192.168.0.0/16 will probably work as well. – user164970 Sep 13 '14 at 18:23

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .