! (ip.addr == 10.1.1.1  or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 )

On 3/5/07, Richard Biever <[EMAIL PROTECTED]> wrote:
> Hello,
>
> This may have been asked before, so apologies if it is a repeat.  If I
> want to filter OUT 1 IP from a Wireshark Capture, I can use the expression:
>
> ! ( ip.addr == 10.0.0.1)
>
> However, I would like to filter out multiple IP's from the capture
> file.  I thought doing it like so would work:
>
>
> ! ( ip.addr == 10.0.0.1) or ! ( ip.addr == 10.0.0.2)
>
> But this did not work the way I expected it to.
>
> So, does anyone know how to filter out multiple IP's from a capture file
> at one time?
>
> Thanks for the help!
>
> _______________________________________________
> Wireshark-users mailing list
> Wireshark-users@wireshark.org
> http://www.wireshark.org/mailman/listinfo/wireshark-users
>


-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan
_______________________________________________
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

Reply via email to