Ethereal-users: [Ethereal-users] Ethereal-users Digest, Vol 16, Issue 17

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: ulrich.boche@xxxxxx
Date: Fri, 13 Aug 2004 13:18:08 +0200
Date: Wed, 11 Aug 2004 13:16:55 -0700
From: Jack Jackson <jack@xxxxxxxxxxxxxxx>
Subject: Re: [Ethereal-users] a few questions.
To: Ethereal user support <ethereal-users@xxxxxxxxxxxx>
Message-ID: <6.1.2.0.2.20040811130631.03a75760@xxxxxxxxxxxxxxxxxxx>
Content-Type: text/plain; charset="us-ascii"; format=flowed

At 12:54 PM 8/11/2004, chris king wrote:
>version 0.10.5
>when i try to filter out my ip ex.  ip.addr != ipaddress  it still shows
up.

ip.addr == value is equivalent to ip.src == value || ip.dst == value.
ip.addr != value is equivalent to ip.src != value || ip.dst != value.

ip.addr != value will only match packets whose source and destination
addresses are both equal to value, and there are not likely to be any such
packets.

Use ! ip.addr == value instead, which is equivalent to ! (ip.src == value
|| ip.dst == value).