Ethereal-users: Re: [ethereal-users] Display filter question

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Sat, 9 Sep 2000 23:30:18 -0400
On Sat, Sep 09, 2000 at 05:46:24PM -0700, Gary Taylor wrote:
> The following attempts fail.  Note that I'm trying not to display the nbns
> traffic (for starters).
> 
> 
> 	ip.addr eq 149.82.78.133 and ip.addr eq 149.82.78.146 and ne nbns
> 	ip.addr eq 149.82.78.133 and ip.addr eq 149.82.78.146 and != nbns
> 	ip.addr eq 149.82.78.133 and ip.addr eq 149.82.78.146 != nbns
> 	ip.addr eq 149.82.78.133 and ip.addr eq 149.82.78.146 and != nbns.*
> 	ip.addr eq 149.82.78.133 and ip.addr eq 149.82.78.146 || !nbns.*
> 
> 
> After I define the filter in either place I hit reload and the trace reloads,
> but no change in what I see.

I'm surprised that you don't get a parse error for this. The
correct way to say "not nbns" is, well, "not nbns"

ip.addr eq 149.82.78.133 and ip.addr eq 149.82.78.146 and not nbns

--gilbert