Wireshark mailing list archives

Re: how to specify an ip subnet except several ip addresses with tshark filter(wireshark display filter)


From: Martin Visser <martinvisser99 () gmail com>
Date: Fri, 5 Oct 2012 20:12:55 +1000

just add them in with an "or"

(not ip.addr==138.45.45.0/24) or (ip.addr == 138.45.45.10 or ip.addr ==
138.45.45.11)
Regards, Martin

MartinVisser99 () gmail com


On 5 October 2012 01:51, esolve esolve <esolvepolito () gmail com> wrote:

Hi,

    I want to specify an IP subnet except serveral ip addresses

   like
            not ip.addr==138.45.45.00/24
   but I don't want addresses like 138.45.45.10, 138.45.45.11 to be
excluded, are there any solutions? thanks!

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org
?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: