Using Wireshark filtering, you want to see all traffic except IP address 192.168.142.3. Which of the following is the best command to filter a specific source IP address?

• A. ip.src ne 192.168.142.3
• B. ip.src != 192.168.142.3
• C. ip.addr != 192.168.142.3
• D. not ip.src 192.168.142.3

Answer: (A)

The idea is to filter by the source IP and exclude that particular address. Using the source field with a “not equal” operator does exactly that: ip.src ne 192.168.142.3 returns all packets whose source IP is anything except 192.168.142.3, so you see traffic from all other sources. The ne form is a common, clear way to express “not equal” in Wireshark display filters. While ip.src != 192.168.142.3 would also work in many cases, the given expression uses the canonical ne syntax, which is why it’s the best choice here. Using ip.addr != 192.168.142.3 would filter out packets where either end matches that IP, not just the source, and not ip.src 192.168.142.3 lacks proper syntax for the filter language.