

So any non-local address should be related to external traffic.

Every interface has one and it should be used for local traffic. 61 wildcard display filter, 171 Wireshark 101: Essential Skills for Network.
#WIRESHARK FILTER BY IP ADDRESS WILDCARD MAC#
Wireshark enhanced with features like connection management, wild card display filter support, autocapture option etc to meet the requirement of internal monitoring tool. Maybe :-) In a single broadcast domain the link local address is enough to filter the traffic. See IP (Internet Protocol) or MAC (Media Access Control) bandwidth usage. If you are looking for a Wireshark display filter that matches either the source or the destination address, then you can use: ip.host matches '.149.195'.
