Wireshark-dev: Re: [Wireshark-dev] Enhancement suggestion: OUI tool for IPV6 SLAAC addresses

From: "Marco Davids (SIDN)" <marco.davids@xxxxxxx>
Date: Fri, 30 Jul 2021 19:40:22 +0200
Op 30-07-21 om 19:35 schreef Marco Davids (SIDN):

I noticed that Wireshark processes the display filter 'ipv6.src_sa_mac' much faster than tshark by the way.

Correction:

Slow:

tshark -r ./ipv6.pcap -Y 'ipv6.sa_mac'

Fast:

tshark -r ./ipv6.pcap -2 -R 'ipv6.sa_mac'


--
Marco

Attachment: OpenPGP_signature
Description: OpenPGP digital signature