Ethereal-users: Re: [Ethereal-users] a few questions.

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: <martin.regner@xxxxxxxxx>
Date: Wed, 11 Aug 2004 22:19:42 +0200
phiber wrote:
> version 0.10.5
> when i try to filter out my ip ex.  ip.addr != ipaddress  it still shows 


The filter "ip.addr != 10.10.10.20" isn't any good filter.
Try with "!(ip.addr == 10.10.10.20)" instead, or "(ip.dst != 10.10.10.20) and (ip.src != 10.10.10.20)

The reason is that there is more than one field ip.addr in an ip-packet (one for detsination address
and one for source address) and the expression ip.addr != 10.10.10.20 as long as not both
the source address and destination address is 10.10.10.20.