Wireshark-bugs: [Wireshark-bugs] [Bug 2428] New: Easier Filter on MACs
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 9 Apr 2008 00:00:19 +0000 (GMT)
http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2428

           Summary: Easier Filter on MACs
           Product: Wireshark
           Version: unspecified
          Platform: PC
        OS/Version: All
            Status: NEW
          Severity: Enhancement
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: shanon@xxxxxxxxxxx


Build Information:
Paste the COMPLETE build information from "Help->About Wireshark", "wireshark
-v", or "tshark -v".
--
Currently, to filter Wireshark for a certain MAC address, you have to put:

eth.addr == 00-14-BF-04-36-1A

I would like to be able to filter with something like the following:

eth.addr == 0014BF04361A  // without the dashes or semicolons
eth.addr == 0014BF*       // with a wildcard

Reason:
We refurb/test voip devices all day long using Wireshark to sniff the packets. 
With these enhancments, we could use scanners to scan the MACs from the devices
(which never have dashes/semicolons in the barcodes) or just put the "MAC
family" to be able to sniff for a device while it is booting.

Thanks and great product!
Shanon


-- 
Configure bugmail: http://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.