[Winpcap-users] strange filtering issue

[Jerry Riedel]

To filter out only packets to or from that host, and not filter out all non-tagged packets, do

	!host 192.168.10.2 or (vlan and !host 192.168.10.2)

> that does _not_ work - still get the packets that have the vlan header. I have seen tcpdump (and windump) references saying that the parentheses must be escaped and/or that the expression must be quoted; is that necessary with Windows?