Using Wireshark, with a host filter for 192.168.0.34, what packets are captured?

Using Wireshark, with a host filter for 192.168.0.34, what packets are captured?

• A. Only packets with 192.168.0.34 in either source or destination address are captured.
• B. Only packets from 192.168.0.34.
• C. All packets.
• D. Only packets to 192.168.0.34.

Answer: (A)

A host filter in Wireshark limits the view to traffic involving that specific host, by matching the address in either the source or destination fields. When you filter for 192.168.0.34, you see all packets where 192.168.0.34 is the sender or the recipient (including ARP exchanges that involve that IP). This includes packets going out from 192.168.0.34 and packets coming in to it. It will not show traffic between other hosts that don’t involve this IP, nor traffic that isn’t addressed to or from this host.

A host filter in Wireshark limits the view to traffic involving that specific host, by matching the address in either the source or destination fields. When you filter for 192.168.0.34, you see all packets where 192.168.0.34 is the sender or the recipient (including ARP exchanges that involve that IP). This includes packets going out from 192.168.0.34 and packets coming in to it. It will not show traffic between other hosts that don’t involve this IP, nor traffic that isn’t addressed to or from this host.