Hi Ulf,
Try "not (tcp.port == 5900)"
"tcp.port !=5900" is really a synonym for "tcp.srcport != 5900 or
tcp.dstport != 5900" which would only be false when both ports were 5900.
Just blame DeMorgan for all this nonsense.
http://www.cs.rochester.edu/users/faculty/nelson/courses/csc_173/proplogic/l
aws.html
I wont not have a coffee or not sent this email now. :-)
Alistair
> -----Original Message-----
> From: Ulf Lamping [mailto:ulf.lamping@xxxxxx]
> Sent: 05 November 2002 11:43
> To: Ethereal
> Subject: [Ethereal-users] TCP port display filter bug?
>
>
> Hi List!
>
> When I play around with a remote machine using VNC,
> there is a huge load of traffic on TCP port 5900 (the VNC data port).
>
> Usually I am not interested in this traffic, but in some
> other data, so I try to filter out all traffic from/to port 5900.
>
> With a capture filter, I am using: "not port 5900" which is
> doing well at capture time.
>
> BUT: when I try to use a display filter "tcp.port != 5900",
> I would expect the same filtering result, but this doesn't
> seem to have any effect. No packets are filtered at all (as
> far as I can see).
>
> The display filter syntax "tcp.port <> 5900" will result in a
> syntax error.
>
> IS THIS A BUG?!? Or a feature :-) Or am I missing something?
>
> Regards, ULFL
> ________________________________________________________________
> Keine verlorenen Lotto-Quittungen, keine vergessenen Gewinne mehr!
> Beim WEB.DE Lottoservice: http://tippen2.web.de/?x=13
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ether> eal-users
>
-----------------------------------------------------------------------
Registered Office:
Marks & Spencer p.l.c
Michael House, Baker Street,
London, W1U 8EP
Registered No. 214436 in England and Wales.
Telephone (020) 7935 4422
Facsimile (020) 7487 2670
www.marksandspencer.com
Please note that electronic mail may be monitored.
This e-mail is confidential. If you received it by mistake, please let us know and then delete it from your system; you should not copy, disclose, or distribute its contents to anyone nor act in reliance on this e-mail, as this is prohibited and may be unlawful.
The registered office of Marks and Spencer Financial Services PLC, Marks and Spencer Unit Trust Management Limited, Marks and Spencer Life Assurance Limited and Marks and Spencer Savings and Investments Limited is Kings Meadow, Chester, CH99 9FB.