You could brute force it with grep and finesse the output as needed:
The-Ultimate-PCAP$ tshark -r ./*202002* -2 -R ipv6.dst_sa_mac -Nm -V | grep
"Destination SA MAC" | sort | uniq
[Destination SA MAC: AmazonTe_05:cd:40 (38:f7:3d:05:cd:40)]
[Destination SA MAC: Sonos_a4:21:8c
Op 30-07-21 om 21:10 schreef João Valverde via Wireshark-dev:
Also, I have not find any aggregate statistics just yet. But
nevertheless still happy with this nice feature.
The statistics for SLAAC/OUI don't exist. What I was trying to say is
that, if we were to add something like that, I
On 30/07/21 18:35, Marco Davids (SIDN) wrote:
Op 30-07-21 om 17:29 schreef João Valverde:
Address: 2001:db8::be05:43ff:fefb:281f
translates into: bc:05:43:fb:28:1f
is: 'AVM GmbH'
There is already an IPv6 "SA MAC" field in Wireshark that does what
you want.
Many
Op 30-07-21 om 19:35 schreef Marco Davids (SIDN):
I noticed that Wireshark processes the display filter 'ipv6.src_sa_mac'
much faster than tshark by the way.
Correction:
Slow:
tshark -r ./ipv6.pcap -Y 'ipv6.sa_mac'
Fast:
tshark -r ./ipv6.pcap -2 -R 'ipv6.sa_mac'
--
Marco
Op 30-07-21 om 17:29 schreef João Valverde:
Address: 2001:db8::be05:43ff:fefb:281f
translates into: bc:05:43:fb:28:1f
is: 'AVM GmbH'
There is already an IPv6 "SA MAC" field in Wireshark that does what
you want.
Many thanks.
You're welcome. :-)
I noticed that
On 30/07/21 15:44, Marco Davids (SIDN) wrote:
Hi João,
Op 30-07-21 om 16:20 schreef João Valverde via Wireshark-dev:
Address: 2001:db8::be05:43ff:fefb:281f
translates into: bc:05:43:fb:28:1f
is: 'AVM GmbH'
There is already an IPv6 "SA MAC" field in Wireshark that does
Hi João,
Op 30-07-21 om 16:20 schreef João Valverde via Wireshark-dev:
Address: 2001:db8::be05:43ff:fefb:281f
translates into: bc:05:43:fb:28:1f
is: 'AVM GmbH'
There is already an IPv6 "SA MAC" field in Wireshark that does what you
want.
Cool, I found it!
Many
On 30/07/21 12:28, Marco Davids (SIDN) via Wireshark-dev wrote:
Hello,
I have an idea for a new feature in Wireshark and would like to hear
your take on it:
In Wireshark, under the 'Ethernet II'-section (when the 'name
resolution' preference is set appropriately) the MAC addresses are
Hello,
I have an idea for a new feature in Wireshark and would like to hear
your take on it:
In Wireshark, under the 'Ethernet II'-section (when the 'name
resolution' preference is set appropriately) the MAC addresses are
'resolved' to manufacturer names. This can be a handy feature.
What
On Fri, 30 Jul 2021 at 11:45, Marco Davids (SIDN) via Wireshark-dev <
wireshark-dev@wireshark.org> wrote:
> Hello,
>
> When I want to file a bug at https://bugs.wireshark.org/bugzilla/ I get:
>
> "Either no products have been defined to enter bugs against or you have
> not been given access to
Hello,
When I want to file a bug at https://bugs.wireshark.org/bugzilla/ I get:
"Either no products have been defined to enter bugs against or you have
not been given access to any."
Under preferences I see:
"You have the following permission bits set on your account:
canconfirm Can
11 matches
Mail list logo
