Wireshark mailing list archives

Re: Enhancement suggestion: OUI tool for IPV6 SLAAC addresses


From: "Marco Davids \(SIDN\) via Wireshark-dev" <wireshark-dev () wireshark org>
Date: Fri, 30 Jul 2021 19:40:22 +0200

Op 30-07-21 om 19:35 schreef Marco Davids (SIDN):

I noticed that Wireshark processes the display filter 'ipv6.src_sa_mac' much faster than tshark by the way.

Correction:

Slow:

tshark -r ./ipv6.pcap -Y 'ipv6.sa_mac'

Fast:

tshark -r ./ipv6.pcap -2 -R 'ipv6.sa_mac'


--
Marco

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: