This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hello, I'm new with tshark and I'm trying to use tshark to see MAC addresses and their rssi or tx power, but can't seem to find the proper field name: the command I'm using is: sudo tshark -S -l -i wlan1 -Y 'wlan.fc.type_subtype eq 4' -T fields -E header=y -e frame.time -e wlan.sa -e wlan.sa_resolved -e wlan_mgt.ssid And I get: frame.time wlan.sa wlan.sa_resolved wlan_mgt.ssid Jan 3, 2017 12:25:03.048773000 EST b8:27:eb:1a:d3:2f Raspberr_1a:d3:2f
Jan 3, 2017 12:25:03.069641000 EST b8:27:eb:1a:d3:2f Raspberr_1a:d3:2f
Jan 3, 2017 12:25:03.092482000 EST b8:27:eb:1a:d3:2f Raspberr_1a:d3:2f
Jan 3, 2017 12:25:03.155865000 EST b8:27:eb:1a:d3:2f Raspberr_1a:d3:2f
Jan 3, 2017 12:25:03.362698000 EST b8:27:eb:1a:d3:2f Raspberr_1a:d3:2f
Jan 3, 2017 12:25:03.383152000 EST b8:27:eb:1a:d3:2f Raspberr_1a:d3:2f
Jan 3, 2017 12:25:03.426263000 EST b8:27:eb:1a:d3:2f Raspberr_1a:d3:2f
Jan 3, 2017 12:25:03.496762000 EST b8:27:eb:1a:d3:2f Raspberr_1a:d3:2f
Jan 3, 2017 12:25:03.517186000 EST b8:27:eb:1a:d3:2f Raspberr_1a:d3:2f

I've tried: (with no luck) chan.chan_tx_pow wlan.dbm_antsignal wlan.antenna wlan.normrssi_antsignal wlan.rawrssi_antsignal wlan.signal_strength wlancap.dbm_antsignal wlancap.ssi_signal

Could anyone help me out?

asked 03 Jan '17, 09:48

tonny_vivas's gravatar image

tonny_vivas
6112
accept rate: 0%


If you don't know the name of a filter, you can try searching for it on Wireshark's online Display Filter Reference page or perusing the Wireshark Filter Expression dialog for fields of interest.

Another tip is to open the capture file in Wireshark and find a packet that contains the field of interest. When you select it, Wireshark will display the field name in the status bar for you.

permanent link

answered 03 Jan '17, 10:02

cmaynard's gravatar image

cmaynard ♦♦
9.3k1038142
accept rate: 20%

edited 03 Jan '17, 10:04

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×832
×33
×1

question asked: 03 Jan '17, 09:48

question was seen: 1,367 times

last updated: 03 Jan '17, 10:04

p​o​w​e​r​e​d by O​S​Q​A