The display filter "tcp.port != 5900" looks for a source or destination
port that is not 5900. This will match on almost every packet.
Try "tcp.srcport != 5900 && tcp.dstport != 5900"
--
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."
-----Original Message-----
From: Ulf Lamping [mailto:ulf.lamping@xxxxxx]
Sent: 05 November 2002 11:43
To: Ethereal
Subject: [Ethereal-users] TCP port display filter bug?
Hi List!
When I play around with a remote machine using VNC,
there is a huge load of traffic on TCP port 5900 (the VNC data port).
Usually I am not interested in this traffic, but in some other data,
so I try to filter out all traffic from/to port 5900.
With a capture filter, I am using: "not port 5900" which is doing well
at capture time.
BUT: when I try to use a display filter "tcp.port != 5900",
I would expect the same filtering result, but this doesn't seem to have
any effect.
No packets are filtered at all (as far as I can see).
The display filter syntax "tcp.port <> 5900" will result in a syntax
error.
IS THIS A BUG?!? Or a feature :-) Or am I missing something?
Regards, ULFL
________________________________________________________________
Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr!
Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________
________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________