On 3/5/07, Richard Biever <rbiever@xxxxxxxxx> wrote:
Thank you! Worked like a champ!
It was a *logical* think for it to work. :-)
Luis Ontanon wrote:
> ! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 )
>
> On 3/5/07, Richard Biever <rbiever@xxxxxxxxx> wrote:
>
>> Hello,
>>
>> This may have been asked before, so apologies if it is a repeat. If I
>> want to filter OUT 1 IP from a Wireshark Capture, I can use the expression:
>>
>> ! ( ip.addr == 10.0.0.1)
>>
>> However, I would like to filter out multiple IP's from the capture
>> file. I thought doing it like so would work:
>>
>>
>> ! ( ip.addr == 10.0.0.1) or ! ( ip.addr == 10.0.0.2)
>>
>> But this did not work the way I expected it to.
>>
>> So, does anyone know how to filter out multiple IP's from a capture file
>> at one time?
>>
>> Thanks for the help!
>>
>> _______________________________________________
>> Wireshark-users mailing list
>> Wireshark-users@xxxxxxxxxxxxx
>> http://www.wireshark.org/mailman/listinfo/wireshark-users
>>
>>
>
>
>
_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
http://www.wireshark.org/mailman/listinfo/wireshark-users
--
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan