Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] Display Filter to Remove an IP Address

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "David Bremer" <DAVEB@xxxxxxxxxxxxxx>
Date: Fri, 21 May 2004 08:16:58 +1200
>not ip.addr eq 10.10.10.10


works for me

btw - I just discovered the green/red highlighting in the display filter that seems to indicate (in)correct syntax - that's so cool (yes I use windows and am impressed by such trivialities ;-) 

Dave

>>> keithfrench@xxxxxxxxxxxxxxx 21/05/04 00:47:22 >>>
I am trying to construct a display filter to remove all traffic to and from a particular IP address, but all things I try do not work. What I have tried is:-

not ip.addr eq 10.10.10.10
not (ip.addr eq 10.10.10.10)
!(ip.addr eq 10.10.10.10)
ip.addr ne 10.10.10.10

where is my syntax going wrong?


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.686 / Virus Database: 447 - Release Date: 14/05/2004