You could try the following:
$ tshark -r file.pcap -R "wlan.da==xx:xx:xx:xx:xx:xx" -T fields -e frame.time -e wlan.da -e wlan.bssid
- Chris
From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Steve Evans
Sent: Tuesday, November 20, 2012 1:54 PM
To: Community support list for Wireshark
Subject: [Wireshark-users] Using Tshark read filter to output WLAN traffic data
I’m trying to find the correct parameters that would read a saved wireless capture and display the following: Abs time Wlan.da == (specific mac) Wlan.bssid Obviously the output needs to be piped put into text form. I’ve gotten close to what I want using the –z but still I’m not getting it. Anyone done this with either wired or wireless? Thx Steve |
CONFIDENTIALITY NOTICE: The information contained in this email message is intended only for use of the intended recipient. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please immediately delete it from your system and notify the sender by replying to this email. Thank you.
