Ethereal-users: Re: [Ethereal-users] a few questions.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Jack Jackson <jack@xxxxxxxxxxxxxxx>
Date: Wed, 11 Aug 2004 13:16:55 -0700
At 12:54 PM 8/11/2004, chris king wrote:

version 0.10.5
when i try to filter out my ip ex.  ip.addr != ipaddress  it still shows up.


ip.addr == value is equivalent to ip.src == value || ip.dst == value.
ip.addr != value is equivalent to ip.src != value || ip.dst != value.
ip.addr != value will only match packets whose source and destination addresses are both equal to value, and there are not likely to be any such packets.
Use ! ip.addr == value instead, which is equivalent to ! (ip.src == value || ip.dst == value).