Re: [Ethereal-dev] ip.addr != display filter does not work withbcasts/mcasts?

["Martin Regner" <martin.regner@xxxxxxxxx>]

Yaniv Kaul wrote:
> When trying to run:
> ip.addr != 1.2.3.4
> It didn't filter the packets:
> 1.2.3.4 -> 1.2.3.255
> 1.2.3.4 -> 224.2.223.232
> 
> Is that ok/known?

There are two ip.addr fields in the ip-header.

Read chapter 6.3.4  "A common mistake" in the Ethereal User guide

http://www.ethereal.com/docs/user-guide/ChWorkBuildDisplayFilterSection.html

The filter "! (ip.addr == 1.2.3.4)" is maybe want you should use
or "ip and !(ip.addr == 1.2.3.4)" (if you only want ip-packets).

Another alternative is to use "(ip.src != 1.2.3.4) and (ip.dst != 1.2.3.4)"