From: bejay [mailto:mcdon18@xxxxxxxxxxxxxxx]
Sent: Friday, December 07, 2001 1:35 PM
> Say I did not want to see any HTTP or DNS packets how do I do this on the
> filter? and can I do the same for IP addresses?
For the first one try - !(http or dns)
For ip addresses try - !(ip.addr == 1.1.1.1 or ip.addr == 1.1.1.2)
Be a little careful with ip.addr filters because an ip packet will
have both the source and destination address available in the ip.addr
attribute.
Jeff Foster
jfoste@xxxxxxxxxxxx
***
The information in this e-mail is confidential and intended solely for the
individual or entity to whom it is addressed. If you have received this
e-mail in error please notify the sender by return e-mail, delete this
e-mail, and refrain from any disclosure or action based on the information.
****
