Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Unique filters

From: Nicole Powell <mznikkip@xxxxxxxxxxx>
Date: Thu, 29 Oct 2009 10:49:03 -0400
I am using Windows, is there a specific filter I can use?

From the desk of Nicole  A. Powell.....
 






From: John.Sheahan@xxxxxxxxxxxxx
To: wireshark-users@xxxxxxxxxxxxx
Date: Thu, 29 Oct 2009 10:43:04 -0400
Subject: Re: [Wireshark-users] Unique filters

If you’re running on linux, I believe you can pipe it to sort with the unique switch:

       

<tshark command> | sort -u

 

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Nicole Powell
Sent: Thursday, October 29, 2009 8:08 AM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Unique filters

 


How can I create a filter that displays only unique packets (i.e., I want to look at all the beacon frames but I don't want to see any duplicates)?