Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am not interested in any information about network activity from any address that starts with 192.168. How can I make Wireshark hide those?

share|improve this question

2 Answers 2

up vote 4 down vote accepted

Enter this into the Filter: field:

!(ip.src >= 192.168.0.0 and ip.src <=192.168.255.255)

and click on Apply. If you want to hide activity going to those addresses as well, change ip.src to ip.addr.

share|improve this answer
    
!(ip.src == 192.168.0.0/16) will probably work as well. –  Guy Harris Sep 13 at 18:25

If you know before you take the recording you will not want those messages, you can use a Capture Filter to avoid getting them in the first place. Specify it in the "Capture Options" dialog. These use a different syntax to the Display Filters like in the previous answer.

not src net 192.168.0.0 mask 255.255.0.0

share|improve this answer
    
not src net 192.168.0.0/16 will probably work as well. –  Guy Harris Sep 13 at 18:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.