RE: [Ethereal-users] Filtering

[Richard Urwin <RUrwin@xxxxxxxxxxxxxx>]

I think you will find that should be

 !(ip.addr == xx.xx.xx.xx)

The two are not equivalent, since in all packets one of the two addresses is not going to be the given address.

 

eg, given the packet:

 

src: 123.4.5.6   dst: 123.7.8.9

 

then ip.addr != 123.4.5.6 will be true, because ip.addr can take the value 123.7.8.9,

and ip.addr != 123.7.8.9 will be true, because ip.addr can take the value 123.4.5.6

 

However with !(ip.addr == 123.4.5.6), ip.addr takes the value 123.4.5.6 and that exists, therefore the filter is false.

 

--
Richard Urwin, Private
"No 9000 series computer has ever made a mitsake or corrubiteddatatato."

-----Original Message-----
From: Andy Testa [mailto:andytesta@xxxxxxxxxxx]
Sent: 03 June 2004 16:11
To: Ethereal user support
Subject: Re: [Ethereal-users] Filtering

(ipaddr != xx.xxx.xxx.xx)

Virtual Reality Studios <gatyo@xxxxxxxxxxx> wrote:

Hi,

 

I searched the whole documentation and I can't find how to filter the packets so my ip isn't showing, but all others are...I don't want to see my IP in the captured list. Can you tell me what filter should I put?

 

Thanks

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users

---

Yahoo! Messenger - Communicate instantly..."Ping" your friends today! Download Messenger Now
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________