Wireshark-users: Re: [Wireshark-users] Unique filters
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: "Sheahan, John" <John.Sheahan@xxxxxxxxxxxxx>
Date: Thu, 29 Oct 2009 10:43:04 -0400

If you’re running on linux, I believe you can pipe it to sort with the unique switch:

       

<tshark command> | sort -u

 

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Nicole Powell
Sent: Thursday, October 29, 2009 8:08 AM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Unique filters

 


How can I create a filter that displays only unique packets (i.e., I want to look at all the beacon frames but I don't want to see any duplicates)?