[Jack Jackson <jack@xxxxxxxxxxxxxxx>]

You are confusing the English word "and" with the logical
operator "and".

In English, when you say:  SIP and RTP

you mean you want SIP packets as well as RTP packets.

The logical operator "and" means both clauses must be
true.  So if you say:  SIP && RTP

each packet must be both SIP and RTP, which can never be true

You want SIP || RTP
That matches packets that are SIP as well as packets that are
RTP.


At 12:06 PM 5/12/2006, Andrena Lefdahl wrote:

Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
         boundary="----_=_NextPart_001_01C675F7.2EC851EB"
Content-Transfer-Encoding: 7bit

Jaap really you got me
there I don’t blame you, but I’ve spent an hour researching this before I
wrote in this time and I can’t get it done. I know it’s got to be easy.
Tell me
please……

Hi,

I guess you'll get in in a
few minutes now.... you just posted
the

message, the inspiration
will come......
||

;)

Jaap

On Fri, 12 May 2006,
Andrena Lefdahl
wrote:

> This must be simple,
but I can't seem to do accomplish it. I am
trying

> to build an _expression_
to filter SIP and RTP. I want just these
two

> protocols to display
at the same time so I can save to a new file.
The

> && operator
looks for packets with both so that doesn't get my
desired

> effect. Is it possible
to do this and
how?

>