Wireshark – Filter by MAC Address

Open up your capture file in Wireshark.

And apply the following display filter.  Shortcut key is Ctrl+/

eth.src == aa:bb:cc:dd:ee:ff

Change the above mac address to the one you want to filter by.

More filtering info can be found at the following link

Wireshark Filtering

Leave a Reply

Your email address will not be published. Required fields are marked *