Wireshark mailing list archives

Re: Unique filters


From: Kevin Cullimore <kcullimo () runbox com>
Date: Mon, 30 Nov 2009 11:32:36 -0500

Nicole Powell wrote:
Is there a similar command for the Windows version?
It may be possible to write something using powershell. The utilities 
found here claim to provide similar functionality (DISCLAIMER: untested).
http://btravan.com/mediawiki-1.6.8/index.php?title=Windows_cli_tools


From the desk of Nicole  A. Powell.....
 





------------------------------------------------------------------------
From: John.Sheahan () priceline com
To: wireshark-users () wireshark org
Date: Thu, 29 Oct 2009 10:43:04 -0400
Subject: Re: [Wireshark-users] Unique filters

If you’re running on linux, I believe you can pipe it to sort with the 
unique switch:

       

<tshark command> | sort -u

 

 

*From:* wireshark-users-bounces () wireshark org 
[mailto:wireshark-users-bounces () wireshark org] *On Behalf Of *Nicole 
Powell
*Sent:* Thursday, October 29, 2009 8:08 AM
*To:* wireshark-users () wireshark org
*Subject:* [Wireshark-users] Unique filters

 


How can I create a filter that displays only unique packets (i.e., I 
want to look at all the beacon frames but I don't want to see any 
duplicates)?

 


------------------------------------------------------------------------

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: