tshark MAC address filtering

Posted in Networking, Security on June 24th, 2010 by termina

Had to troubleshoot a Solaris box but couldn’t go by IP address since it wasn’t picking one up.


tshark -i eth1 -R "eth.addr == 00:03:ba:05:0d:60"