Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am not interested in any information about network activity from any address that starts with 192.168. How can I make Wireshark hide those?

share|improve this question
up vote 3 down vote accepted

Enter this into the Filter: field:

!(ip.src >= and ip.src <=

and click on Apply. If you want to hide activity going to those addresses as well, change ip.src to ip.addr.

share|improve this answer
!(ip.src == will probably work as well. – user164970 Sep 13 '14 at 18:25

If you know before you take the recording you will not want those messages, you can use a Capture Filter to avoid getting them in the first place. Specify it in the "Capture Options" dialog. These use a different syntax to the Display Filters like in the previous answer.

not src net mask

share|improve this answer
not src net will probably work as well. – user164970 Sep 13 '14 at 18:23

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.