Re: Using Tshark read filter to output WLAN traffic data

["Maynard, Chris" <Christopher.Maynard () GTECH COM>]

You could try the following:

$ tshark -r file.pcap -R "wlan.da==xx:xx:xx:xx:xx:xx" -T fields -e frame.time -e wlan.da -e wlan.bssid

- Chris

From: wireshark-users-bounces () wireshark org [mailto:wireshark-users-bounces () wireshark org] On Behalf Of Steve 
Evans
Sent: Tuesday, November 20, 2012 1:54 PM
To: Community support list for Wireshark
Subject: [Wireshark-users] Using Tshark read filter to output WLAN traffic data

I’m trying to find the correct parameters that would read a saved wireless capture and display the following:
Abs time          Wlan.da == (specific mac)      Wlan.bssid
Obviously the output needs to be piped put into text form.
I’ve gotten close to what I want using the –z but still I’m not getting it.
Anyone done this with either wired or wireless?
Thx
Steve


CONFIDENTIALITY NOTICE: The information contained in this email message is intended only for use of the intended 
recipient. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, 
distribution or copying of this communication is strictly prohibited. If you have received this communication in error, 
please immediately delete it from your system and notify the sender by replying to this email.  Thank you.

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe