how to configure network filter rule in packet decoder to filter source and destination subnet

[Lalsingh]

how to configure network filter rule in packet decoder to filter source and destination subnet.

My source subnet is 172.16.4.0/22,172.20.6.128/27, and destination subnet is 172.20.6.88/28,172.20.6.88/28

I am configuring the syntax like this .

ip.src = 172.16.4.0/22 || 172.20.6.128/27 && ip.dst= 172.20.6.88 || ip.dst=172.20.6.88/28

But after this still i am getting packet from this subnet .

so Please suggest  correct syntax . 

[david_waugh]

Hello

Not sure that your syntax is correct.

Try:

(ip.src = 172.16.4.0/22 || ip.src=172.20.6.128/27) && (ip.dst= 172.20.6.88 || ip.dst=172.20.6.88/28)

[Anonymous]

David is right, and that should fix your rule issue. I just wanted to mention that if you're wanting to completely remove the traffic, you might want to consider using the Berkeley Packet Filter. It can drop traffic like that with almost no overhead.