((IPv4.SourceAddress = XX.XXX.XX.XX) OR (IPv4.DestinationAddress = XX.XXX.X.XX)) In the Display Filter pane, enter the filter: You will need this IPv4 address, and it should display within the columns Source and Destination within Microsoft Network Monitor, depending if the frame is a request to the site, or a response back from it. Where the IPv4 address of the host is listed.

Where HOSTNAME is the name of the application. If you are uncertain what the site’s IPv4 address is that you want to filter by, you can ping it from the command line:

Network Monitor will list it using its IPv4 address. The application being tested by the browser will not display using its URL, however. When the Frames are displayed in the Frame Summary, the Source and Destination columns appear. This is because Microsoft Network Monitor listens for whatever network traffic it can, perhaps from Outlook, One Drive, or other applications, in addition to a browser such as Internet Explorer. After Stopping a Started capture in a Capture tab in Microsoft Network Monitor, a massive amount of frames may result in the “Frame Summary” pane.

Wireshark filter by ip wildcard