How to filter out a MAC address in Wireshark

To filter out a mac address in Wireshark, make a filter like so:

not eth.addr==F4-6D-04-E5-0B-0D

To get the mac address, type “ncpa.cpl” in the Windows search, which will bring you here:

Right click the connection, go to ‘Status’:

Then, go to details:

And write down the value listed in “Physical Address”. You can ctrl-c when the window is visible, and all the settings will be copied to your clipboard.

Leave a Reply

Your email address will not be published. Required fields are marked *