I am not a frequent user of
WireShark, and as the user interface has changed significantly I can't tell exactly how, but in the past I defined a filter for the ip address e.g. `
ip.addr eq 127.0.0.1
` and then started capture.
When you see a line in the log that is interesting, you can right-click and select `
Follow stream`.
This tutorial shows what I mean:
How to Use Wireshark to Capture, Filter and Inspect Packets[
^]
The filter options are explained here:
DisplayFilters - The Wireshark Wiki[
^]
Here is an another interesting tutorial about "Sniffing tools":
Ethical Hacking Sniffing Tools[
^]