If I'm also running on Ubuntu, can I use the 'sort -u' options as well?
 
   
 
 
 
 
  > From: robert@xxxxxxx > To: wireshark-users@xxxxxxxxxxxxx > Date: Mon, 30 Nov 2009 11:40:32 -0500 > Subject: Re: [Wireshark-users] Unique filters >  > Just run tshark from CYGWin and pipe it to sort -u. >  > Robert D. Scott                 Robert@xxxxxxx > Senior Network Engineer         352-273-0113 Phone > CNS - Network Services          352-392-2061 CNS Phone Tree > University of Florida           352-392-9440 FAX > Florida Lambda Rail             352-294-3571 FLR NOC > Gainesville, FL  32611          321-663-0421 Cell >  >  > -----Original Message----- > From: wireshark-users-bounces@xxxxxxxxxxxxx > [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Kevin Cullimore > Sent: Monday, November 30, 2009 11:33 AM > To: Community support list for Wireshark > Subject: Re: [Wireshark-users] Unique filters >  > Nicole Powell wrote: > > Is there a similar command for the Windows version? > It may be possible to write something using powershell. The utilities  > found here claim to provide similar functionality (DISCLAIMER: untested). > http://btravan.com/mediawiki-1.6.8/index.php?title=Windows_cli_tools >  > > > > From the desk of Nicole  A. Powell..... > >   > > > > > > > > > > > > ------------------------------------------------------------------------ > > From: John.Sheahan@xxxxxxxxxxxxx > > To: wireshark-users@xxxxxxxxxxxxx > > Date: Thu, 29 Oct 2009 10:43:04 -0400 > > Subject: Re: [Wireshark-users] Unique filters > > > > If you're running on linux, I believe you can pipe it to sort with the  > > unique switch: > > > >         > > > > <tshark command> | sort -u > > > >   > > > >   > > > > *From:* wireshark-users-bounces@xxxxxxxxxxxxx  > > [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] *On Behalf Of *Nicole  > > Powell > > *Sent:* Thursday, October 29, 2009 8:08 AM > > *To:* wireshark-users@xxxxxxxxxxxxx > > *Subject:* [Wireshark-users] Unique filters > > > >   > > > > > > How can I create a filter that displays only unique packets (i.e., I  > > want to look at all the beacon frames but I don't want to see any  > > duplicates)? > > > >   > > > > > > ------------------------------------------------------------------------ > > > > > ___________________________________________________________________________ > > Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx> > > Archives:    http://www.wireshark.org/lists/wireshark-users > > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users > > > mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe >  > ___________________________________________________________________________ > Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx> > Archives:    http://www.wireshark.org/lists/wireshark-users > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users >   > mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe >  >  > ___________________________________________________________________________ > Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx> > Archives:    http://www.wireshark.org/lists/wireshark-users > Unsubscribe: https://wireshark.org/mailman/options/wireshark-users >              mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe  		 	   		  
 |