In Wireshark display filters, ip.dst==192.168.1.2 selects:

• A. IP packets whose destination is 192.168.1.2
• B. IP packets whose source is 192.168.1.2
• C. IP packets within the 192.168.1.0/24 subnet
• D. All traffic not containing 192.168.1.2 as destination

Answer: (A)

ip.dst==192.168.1.2 selects IP packets whose destination address is exactly 192.168.1.2. The ip.dst field refers to the destination IP in the IP header, and the == operator tests for an exact match, so only packets headed to that specific address pass. If you wanted the packets where that address is the source, you’d use ip.src==192.168.1.2. To cover an entire subnet you’d use a CIDR form like ip.dst==192.168.1.0/24. To get everything except those packets, you’d filter with ip.dst!=192.168.1.2.