Ethereal-users: RE: [Ethereal-users] Display filter weirdness

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jeff Foster <jfoste@xxxxxxxxxxxx>
Date: Tue, 2 Oct 2001 11:11:54 -0500
From: Mathew Butler [mailto:winged@xxxxxxxxxxxxxxxxxxx]
Sent: Tuesday, October 02, 2001 11:07 AM


> Heya, I'm having a bit of trouble getting display filters to work
correctly.
> 
> Basically, here's the English translation of what I want to do: "Display
all
> packets sourced from or destined to 192.168.0.11, that are NOT sourced or
>destined to 205.231.82.69 and are NOT sourced or destined to
205.231.82.42."

Boolean logic, gotta love it...

try (ip.addr eq 192.168.0.11) and not ( (ip.addr eq 205.231.82.69) or
( ip.addr eq 205.231.82.42))


Jeff Foster
jfoste@xxxxxxxxxxxx



***
The information in this e-mail is confidential and intended solely for the
individual or entity to whom it is addressed. If you have received this
e-mail in error please notify the sender by return e-mail, delete this
e-mail, and refrain from any disclosure or action based on the information.
****