ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] tshark filter by mac address

From: Chris Henderson <henders254@xxxxxxxxx>
Date: Tue, 24 Mar 2009 15:29:15 +1100
Is there any way to tell tshark not to show certain mac addresses? I'm
running: tshark -i eth0 -n port 68 -R 'bootp.type == 2' -o
column.format:'"Source MAC","%hs"' and want it not to show
ff:ff:ff:ff:ff:ff and 00:40:38:6f:76

Thanks.