Ethereal-users: Re: [Ethereal-users] Please help!

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Guy Harris <gharris@xxxxxxxxx>
Date: Fri, 10 Sep 2004 12:10:05 -0700
Moshe Haviv wrote:


For example :

(ip.addr != 130.149.17.8 )and (ip.addr != 130.149.17.21 )
That matches packets where at least one IP address isn't 130.149.17.8 and at least one IP address isn't 130.149.17.21. Traffic between 130.149.17.8 and 130.149.17.21 would be matched, because 130.149.17.21 isn't 130.149.17.8 and 130.149.17.8 isn't 130.149.17.21. 

To exclude all traffic to or from 130.149.17.8 or 130.149.17.21, use

	!(ip.addr == 130.149.17.8) and !(ip.addr == 130.149.17.21)

(which is the same sort of test as

	not host 130.149.17.8 and not host 130.149.17.21

in a capture filter).