Wireshark-users: Re: [Wireshark-users] filter one ip while excluding another
Date: Wed, 9 Sep 2009 16:29:41 -0400
Ip.addr eq and !ip.addr eq

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf Of Tony
Sent: Wednesday, September 09, 2009 4:23 PM
To: [email protected]
Subject: [Wireshark-users] filter one ip while excluding another

wireshark v1.0.4

I'm new to these forums so hi.
I need to know the expression to use in wireshark to:
1) filter on one ip address while excluding another.
eg: I want to filter ip address (easy I know - ip.addr eq but at the same time I want to exclude ip from the
readout. What's the expression to do this? I've been trawling google but 
can't find the answer. Thanks for any pointers.

Sent via:    Wireshark-users mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:[email protected]?subject=unsubscribe