Wireshark-users: Re: [Wireshark-users] Display Filter for multiple IP's?

From: Andrew Hood <ajhood@xxxxxxxxx>
Date: Tue, 06 Mar 2007 11:43:16 +1100

Luis Ontanon wrote:
> ! (ip.addr == 10.1.1.1  or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 )

Which any worker in symbolic logic will tell you is the same as:

!(ip.addr == 10.1.1.1) and !(ip.addr == 10.2.2.2) and !(ip.addr ==
10.3.3.3 )

So the OP could have just swapped "or" for "and".

-- 
There's no point in being grown up if you can't be childish sometimes.
                -- Dr. Who