ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] tshark, outputting full MAC address, not named address

Date: Tue, 10 Feb 2009 17:21:32 +0100
Hi George,

You can use tshark -n to disable name resolution.

Please take a look at the man pages:
http://www.wireshark.org/docs/man-pages/tshark.html or tshark -h

$ tshark -h
<snip>
Processing:
   -n                       disable all name resolutions (def: all enabled)
>snip>

Thanks
Joan

On Tue, 10 Feb 2009 10:41:44 -0500 George Nychis wrote
>Hi all,
>
>How can I get tshark to output a full MAC address such as 
>00:e0:81:49:3c:b4 instead of TyanComp_49:3c:b4 ?
>
>I am using "Source", "%s" to get the TyanComp_49:3c:b4 output.
>
>Thanks!
>George
>___________________________________________________________________________
>Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
>Archives:    http://www.wireshark.org/lists/wireshark-users
>Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>             mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe