tshark capture device name and mac from probe requests

Question

Hi,

When i run -> sudo tshark -S -l -i mon0 -R 'wlan.fc.type_subtype eq 4' , I get

12.841925 Apple_11:11:11 -> Broadcast 802.11 151 Probe Request, SN=1932, FN=0, Flags=........C, SSID=Broadcast

It gives me the device name(Apple_11:11:11) and SSID but not mac address.

When i run -> sudo tshark -S -l -i mon0 -R 'wlan.fc.type_subtype eq 4' -T fields -e wlan.sa -e wlan_mgt.ssid

i get MACADDRESS SSIDName , mac address does not have device name.

I need to get device name and MAC address for the device from a single command. Please help with the options

I want output as below

Apple , Inc . | 40: a6 : d9 : ee : | -28 dB | 1 | ''

SAMSUNG ELECTRO | 20:64:32: c1 : | -45 dB | 1 | ''

Murata Manufact | 00:37:6 d: ea : | -88 dB | 1 | ''

Thanks Sandeep

Answer 1

As of revision 51742, you can use:

-T fields -e wlan.sa_resolved -e wlan.sa

See the answer I provided to this question for more details. And here are two more related questions: