Wireshark-users: Re: [Wireshark-users] Display Filter for multiple IP's?
From: Richard Biever <[email protected]>
Date: Mon, 05 Mar 2007 17:39:31 -0500
Thank you!  Worked like a champ!

Luis Ontanon wrote:
! (ip.addr ==  or ip.addr == or ip.addr == )

On 3/5/07, Richard Biever <[email protected]> wrote:

This may have been asked before, so apologies if it is a repeat.  If I
want to filter OUT 1 IP from a Wireshark Capture, I can use the expression:

! ( ip.addr ==

However, I would like to filter out multiple IP's from the capture
file.  I thought doing it like so would work:

! ( ip.addr == or ! ( ip.addr ==

But this did not work the way I expected it to.

So, does anyone know how to filter out multiple IP's from a capture file
at one time?

Thanks for the help!

Wireshark-users mailing list
[email protected]