Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-dev: Re: [Ethereal-dev] ip.addr != display filter does not work with bcasts/mcasts?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: ronnie sahlberg <ronniesahlberg@xxxxxxxxx>
Date: Sun, 5 Sep 2004 19:22:17 +1000
Use  !(ip.addr==1.2.3.4)

ip.addr may occur multiple times in a packet and if any such occurence
happens to be something else, then ip.addr!=1.2.3.4  is true.


Essentially:

(ip.addr!=1.2.3.4)  !=  !(ip.addr==1.2.3.4)

:-)



On Sun, 05 Sep 2004 12:13:58 +0300, Yaniv Kaul <ykaul@xxxxxxxxxxxxxx> wrote:
> When trying to run:
> ip.addr != 1.2.3.4
> It didn't filter the packets:
> 1.2.3.4 -> 1.2.3.255
> 1.2.3.4 -> 224.2.223.232
> 
> Is that ok/known?
> 
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev
>