ip.addr == 192.168.155.12 is the string I have used to get what I am looking for, along with what is needed to filter out everything but port 80 traffic. What I get back is all traffic for 192.168.155.12, and 192.168.155.120, and 192.168.155.121, etc. on port 80.
I have seen syntax like (ip.addr == 192.168.155.12 or ip.addr == 192.168.155.11) work so I wonder if I need to add parentheses. Using 192.168.155.012 doesn't work any better, either... K. Isaacson _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users