Ethereal-dev: [Ethereal-dev] Ethereal and filter - surprise!

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Ph. Marek" <marek@xxxxxxxxxx>
Date: Fri, 20 Apr 2001 10:31:23 +0200
Hi everyone,

I captured some packets and wanted to filter all out which come or go to a
specific host.

So I said Filter -> Add Expression -> ip.addr != host -> New -> Save -> Ok.

But surprise, surprise! the packets were there all right!


What I think that happens is that the filter code matches either ip-address
to the specific one given - and one of (dst,src) is NEVER this host, as
packets FROM this TO this host will never reach the network.

I think this should be corrected to if the expression is a negation and it
may match either then BOTH (dst,src) can lead to drop the packet.


Regards,

Phil