I'm trying to get a list of all the nearby devices with wifi turned on. I'm currently using the filter 'wlan.fc.type_subtype == 0x04' but it's filling up too quickly, causing loss of overview. Does Wireshark have the ability only show frames from the last 20 seconds? And is it possible to tag frames from a certain mac-address so I can easily identify known phones? asked 16 Dec '13, 12:04  Timmmmmm |
One Answer:
Would a filter on arp and other broadcast frames do what you need? answered 16 Dec '13, 22:58  mrEEde |
