> -----Original Message----- > From: Guy Harris [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 20, 2003 11:01 AM
> And if you want to see IP frames, but not IP frames with DNS
> traffic in
> them and not IP frames to or from the machine running Ethereal, then
>
> ip && !port 53 && !host {machine running Ethereal}
>
> will work. (You don't need "!arp" - ARP packets aren't IP packets.)
That works just fine.. Thanks.
