Wireshark-users: [Wireshark-users] What is wrong with this filter?
From: "Parkis, Scott" <sparkis@xxxxxxxxxxxxxxxxxxxx>
Date: Wed, 25 Mar 2009 14:42:11 -0400

p.addr==192.168.2.34 and (ip.addr!=10.1.10.150 and ip.addr!=10.1.11.140)

 

I want to show all packets src and/or dest from 2.34 but I do not want any packets to/from 10.150 and 11.140. I tried it with and without the () but it still shows me results with those two 10.1.x.x.

 

Thanks,