Wireshark-users: Re: [Wireshark-users] tshark, outputting full MAC address, not named address
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: j.snelders@xxxxxxxxxx
Date: Tue, 10 Feb 2009 17:21:32 +0100
Hi George,

You can use tshark -n to disable name resolution.

Please take a look at the man pages:
http://www.wireshark.org/docs/man-pages/tshark.html or tshark -h

$ tshark -h
<snip>
Processing:
   -n                       disable all name resolutions (def: all enabled)
>snip>

Thanks
Joan

On Tue, 10 Feb 2009 10:41:44 -0500 George Nychis wrote
>Hi all,
>
>How can I get tshark to output a full MAC address such as 
>00:e0:81:49:3c:b4 instead of TyanComp_49:3c:b4 ?
>
>I am using "Source", "%s" to get the TyanComp_49:3c:b4 output.
>
>Thanks!
>George
>___________________________________________________________________________
>Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
>Archives:    http://www.wireshark.org/lists/wireshark-users
>Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe