Wireshark-users: [Wireshark-users] tshark filter by mac address
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Chris Henderson <henders254@xxxxxxxxx>
Date: Tue, 24 Mar 2009 15:29:15 +1100
Is there any way to tell tshark not to show certain mac addresses? I'm
running: tshark -i eth0 -n port 68 -R 'bootp.type == 2' -o
column.format:'"Source MAC","%hs"' and want it not to show
ff:ff:ff:ff:ff:ff and 00:40:38:6f:76

Thanks.