In Wireshark, which display filter would exclude traffic from IP 192.168.142.3?

In Wireshark, which display filter would exclude traffic from IP 192.168.142.3?

• A. ip.src != 192.168.142.3
• B. ip.dst ne 192.168.142.3
• C. ip.src ne 192.168.142.3
• D. ip.addr not 192.168.142.3

Answer: (C)

Excluding traffic from a specific host means filtering on the source address and removing any packets that originate from that address. In Wireshark display filters, ip.src identifies the packet’s source IP, and applying a not-equal condition removes those packets. So ip.src ne 192.168.142.3 (or ip.src != 192.168.142.3) will show only packets whose source is not 192.168.142.3. Using ip.dst would target packets headed to that IP, which isn’t what’s being asked, and ip.addr would exclude any packet that mentions that IP in either position, which is too broad. The filter that targets the source and excludes that IP best matches the goal.

Excluding traffic from a specific host means filtering on the source address and removing any packets that originate from that address. In Wireshark display filters, ip.src identifies the packet’s source IP, and applying a not-equal condition removes those packets. So ip.src ne 192.168.142.3 (or ip.src != 192.168.142.3) will show only packets whose source is not 192.168.142.3. Using ip.dst would target packets headed to that IP, which isn’t what’s being asked, and ip.addr would exclude any packet that mentions that IP in either position, which is too broad. The filter that targets the source and excludes that IP best matches the goal.