Hi all I just came across this "bug" (which is over 2 years old), and i wanted to give my feedback as it seems its not really a bug.
Due to the man page, there are options (rule-specifications) which have the "!" option to invert the test like: --source-mac [!] address[/mask] and there are some which do not seem to have that option, like: --opcode code[/mask] Therefore, i would say it is not a bug, but more of a feature request ;-) I hope i could help to "close" this bug. Regards