On Wed, Jun 06, 2007 at 12:46:53AM +0200, Martin Andersson wrote: > Is it possible (via a file for instance) to get descriptive names of > mac addresses in tshark. > > Example: > > Netgear_7e:39:d4 -> IntelCor_19:32:c3 LLC I, N(R)=0, N(S)=0; DSAP NULL > LSAP Individual, SSAP NULL LSAP Command > > Should be something like > > DeviceA -> DeviceB LLC I, N(R)=0, N(S)=0; DSAP NULL LSAP Individual, > SSAP NULL LSAP Command
Yes, using the personal "ethers" file. The format is the same as the /etc/ethers file on a Unix machine (Basically a MAC address separated by colons, then a tab, then a descriptive name). The location for this file on Windows and Unix can be found here: http://www.wireshark.org/docs/wsug_html_chunked/ChAppFilesConfigurationSection.html Steve _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
