Skip to content
This repository has been archived by the owner on Jan 26, 2024. It is now read-only.

Help on listening to traffic via a specific adapter #89

Open
Lecale opened this issue May 12, 2020 · 1 comment
Open

Help on listening to traffic via a specific adapter #89

Lecale opened this issue May 12, 2020 · 1 comment

Comments

@Lecale
Copy link

Lecale commented May 12, 2020

When I run windump -D I can see that I have 3 adapters on a machine
1.\Device\NPF_{name} (Intel(R) PRO/3000 PT Dual Port Server Adapter)
2...
3...
How do query traffic coming from only of those adapters? When I try bmdb addfilter I am not able to find a good syntax
bmdb addfilter A A "src host name" was what I expected to work, but it is rejected

@codebox
Copy link
Owner

codebox commented May 12, 2020

If you want to create a filter for traffic coming from one of your adapters you can just use the ip address of the adapter you are interested in, for example:
bmdb addfilter A A "src 1.2.3.4"

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants