Luis Ontanon wrote: > ! (ip.addr == 10.1.1.1 or ip.addr == 10.2.2.2 or ip.addr == 10.3.3.3 )
Which any worker in symbolic logic will tell you is the same as: !(ip.addr == 10.1.1.1) and !(ip.addr == 10.2.2.2) and !(ip.addr == 10.3.3.3 ) So the OP could have just swapped "or" for "and". -- There's no point in being grown up if you can't be childish sometimes. -- Dr. Who _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users