ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] filter one ip while excluding another

From: "Tony" <tonj@xxxxxxxxxx>
Date: Wed, 9 Sep 2009 21:23:20 +0100
wireshark v1.0.4

I'm new to these forums so hi.
I need to know the expression to use in wireshark to:
1) filter on one ip address while excluding another.
eg: I want to filter ip address 10.0.0.1 (easy I know - ip.addr eq
10.0.0.1) but at the same time I want to exclude ip 10.0.0.5 from the
readout. What's the expression to do this? I've been trawling google but I
can't find the answer. Thanks for any pointers.