Ask Your Question

Revision history [back]

Questions about WS Display filters - Documentation unclear

In the current version of WS and documentation there's an example of a display filter

ip.addr == 10.43.54.65 equivalent to ip.src == 10.43.54.65 or ip.dst == 10.43.54.65
I'm good with that.

But if you filter out the IP address one could use ip.addr != 10.43.54.65 But from the docs, it looks like in previous versions of WS it wasn't working properly and the docs say to use ! ( ip.addr == 10.43.54.65 ) which would be equivalent to ip.src != 10.43.54.65 or ip.dst != 10.43.54.65

It's not clear, but has this issue been fixed? And ip.addr != 10.43.54.65 is now working as expected? And it would filter out source 10.43.54.65 OR destination 10.43.54.65 displaying ALL IP except 10.43.54.65?

Can you give 1 or two syntax examples for === ?

Thank you