Ethereal-users: [Ethereal-users] TCP port display filter bug?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Ulf Lamping <ulf.lamping@xxxxxx>
Date: Tue, 5 Nov 2002 12:42:48 +0100
Hi List!

When I play around with a remote machine using VNC,
there is a huge load of traffic on TCP port 5900 (the VNC data port).

Usually I am not interested in this traffic, but in some other data,
so I try to filter out all traffic from/to port 5900.

With a capture filter, I am using: "not port 5900" which is doing well at capture time.

BUT: when I try to use a display filter "tcp.port != 5900",
I would expect the same filtering result, but this doesn't seem to have any effect.
No packets are filtered at all (as far as I can see).

The display filter syntax "tcp.port <> 5900" will result in a syntax error.

IS THIS A BUG?!? Or a feature :-) Or am I missing something?

Regards, ULFL
________________________________________________________________
Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr! 
Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13