dumpcap

-f seçeneği
Açıklaması şöyle

-f

Set the capture filter expression.

The entire filter expression must be specified as a single argument (which means that if it contains spaces, it must be quoted).

This option can occur multiple times. If used before the first occurrence of the -i option, it sets the default capture filter expression. If used after an -i option, it sets the capture filter expression for the interface specified by the last -i option occurring before this option. If the capture filter expression is not set specifically, the default capture filter expression is used if provided.

Şöyle yaparız.

dumpcap -i wlp2s0 -b filesize:100000 -w capture.pcapng -a duration:18000
  -f `wlan addr1 d4:be:d9:5b:a6:45'