Ethereal-users: [Ethereal-users] substring in display filter not working?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Benjamin Ritcey <ethereal@xxxxxxxxxx>
Date: Fri, 26 Jan 2001 12:37:11 -0500
Hi all,

I've looked through the archives and didn't see an answer to this one -

the following display filter works fine:

eth.src != 00:e0:bb:02:1d:0c

but neither "eth.src[0] != 00:e0:bb" or "eth.src[0:3] != 00:e0:bb"
work.  That's practically identical to the example given in the man page
-- am I doing something dumb?  By "don't work", I mean I get a 

Unable to parse filter string "eth.src[0] != 00:e0:bb"

message.  This is with 

ethereal 0.8.15, with GTK+ 1.2.5, with libpcap 0.6, with libz 1.1.3,
without SNMP

under a non-standard Redhat 6.1  (built ethereal from source, not an
RPM).

Any help would be appreciated.

Thanks,

-b