Wireshark mailing list archives
Re: Unique filters
From: Guy Harris <guy () alum mit edu>
Date: Thu, 29 Oct 2009 09:16:27 -0700
On Oct 29, 2009, at 7:54 AM, Nicole Powell wrote:
That filter does not provide the information that I am looking for. For example, I want to be able to apply this filter 'wlan.fc.subtype == 8' and see all the unique beacon frames because I need to parse certain information into a database. I thought maybe there was a 'sort unique' phrase I could add to that filter to do that.
No, filters only filter, they don't sort, and they act on each packet individually, just acting on individual fields in a packet; there's no history of the sort that would be needed to filter out duplicates. What's the definition of a duplicate beacon here? Same SSID? And what's the information you want to put into the database? ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- Unique filters Nicole Powell (Oct 29)
- Re: Unique filters Sheahan, John (Oct 29)
- Re: Unique filters Nicole Powell (Oct 29)
- Re: Unique filters j.snelders (Oct 29)
- Re: Unique filters Nicole Powell (Oct 29)
- Re: Unique filters Guy Harris (Oct 29)
- Re: Unique filters Nicole Powell (Oct 29)
- Re: Unique filters Nicole Powell (Oct 29)
- Re: Unique filters Sheahan, John (Oct 29)