Ethereal-dev: Re: [Ethereal-dev] ip.addr != 1.2.3.4 should work as expected

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: didier <dgautheron@xxxxxxxx>
Date: Mon, 09 May 2005 21:41:06 +0000
Jaap Keuter wrote:

On Mon, 9 May 2005, Ulf Lamping wrote:



Hi!

Some filter strings like:

ip.addr != 1.2.3.4

doesn't work as expected (filter out packets to and from ip.addr
1.2.3.4), one must use:

!(ip.addr == 1.2.3.4)

instead (the same applies to tcp.port and alike "pseudo fields").

Strictly speaking this might be grammatically correct, but it seems that
this is a *very common* mistake, which should be avoided if possible IMHO.



Welcome to the wonderfull world of regular expressions.
For one they are very powerfull, on the other they can bite you.


Rather De Morgan stuff, no?