Op 30-07-21 om 19:35 schreef Marco Davids (SIDN):

I noticed that Wireshark processes the display filter 'ipv6.src_sa_mac' much faster than tshark by the way.

Correction:

Slow:

tshark -r ./ipv6.pcap -Y 'ipv6.sa_mac'

Fast:

tshark -r ./ipv6.pcap -2 -R 'ipv6.sa_mac'


--
Marco

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Reply via email to