I am sniffing for several devices in a congested environment. I'm wondering if there is an easy way to accomplish filtering that I don't know of.
I have two APs that things are connecting to so I filter by wlan.addr==xx || wlan.addr==xx etc., but this leaves in a bunch of probes from other systems around me which I do not need in the sniff. It would be nice to filter things out and make smaller files.
I want to say something like (wlan.addr==xx || wlan.addr==xx) && no other addresses.
Right now I could do that by (wlan.addr==AP1 && wlan.addr=device1) || (wlan.addr==AP2 && wlan.addr=device1) etc. for all possible combinations, but it would be long and possibly prone to errors. Hoping there is a shorter solution.
Thanks for any help or ideas