Ethereal-dev: Re: [Ethereal-dev] ip.addr != display filter does not work withbcasts/mcasts?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Mon, 06 Sep 2004 01:05:50 -0700
Alok wrote:

when can i ever use ip.addr!=x.y.z.w in that case??
in other words if we do have an ip.addr!= option should it not be an implicit Source Or Destination

The packet filter code knows nothing of "ip.addr", so it can't treat it differently from other fields - "ip.addr != XXX" means "packet contains an 'ip.addr' value that's not XXX", just as "ip.protocol != XXX" means "packet contains an 'ip.protocol' value that's not XXX".