Hello,
This may have been asked before, so apologies if it is a repeat. If I
want to filter OUT 1 IP from a Wireshark Capture, I can use the expression:
! ( ip.addr == 10.0.0.1)
However, I would like to filter out multiple IP's from the capture
file. I thought doing it like so would work:
! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 )
On 3/5/07, Richard Biever [EMAIL PROTECTED] wrote:
Hello,
This may have been asked before, so apologies if it is a repeat. If I
want to filter OUT 1 IP from a Wireshark Capture, I can use the expression:
! ( ip.addr ==
Thank you! Worked like a champ!
Luis Ontanon wrote:
! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 )
On 3/5/07, Richard Biever [EMAIL PROTECTED] wrote:
Hello,
This may have been asked before, so apologies if it is a repeat. If I
want to filter OUT 1 IP from a
On 3/5/07, Richard Biever [EMAIL PROTECTED] wrote:
Thank you! Worked like a champ!
It was a *logical* think for it to work. :-)
Luis Ontanon wrote:
! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 )
On 3/5/07, Richard Biever [EMAIL PROTECTED] wrote:
Hello,
Luis Ontanon wrote:
! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 )
Which any worker in symbolic logic will tell you is the same as:
!(ip.addr == 10.1.1.1) and !(ip.addr == 10.2.2.2) and !(ip.addr ==
10.3.3.3 )
So the OP could have just swapped or for and.
--
There's
