-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathfilterbymac_v0.1.bat
24 lines (21 loc) · 1.04 KB
/
filterbymac_v0.1.bat
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
echo off
REM Filter By MAC v0.1
mode 88,40
color E2
path=c:\Program Files\wireshark\
echo.
echo ***********************************************************************
echo **************************** Filter By MAC ****************************
echo ***************************** v.0.1 *****************************
echo *************************** by David Morgan (aka: "r0m")***************
echo ***********************************************************************
echo.
echo.
echo *********************** Filter by MAC Address ****************************
echo.
set /p tsharkfiltereth=Enter the MAC address (no delimiters):
echo.
set tsharkfilterethfilename=%tsharkfiltereth:~0,2%-%tsharkfiltereth:~2,2%-%tsharkfiltereth:~4,2%-%tsharkfiltereth:~6,2%-%tsharkfiltereth:~8,2%-%tsharkfiltereth:~10,2%
set tsharkfiltereth=%tsharkfiltereth:~0,2%:%tsharkfiltereth:~2,2%:%tsharkfiltereth:~4,2%:%tsharkfiltereth:~6,2%:%tsharkfiltereth:~8,2%:%tsharkfiltereth:~10,2%
tshark -r %1 -R eth.addr==%tsharkfiltereth% -2 -w .\%tsharkfilterethfilename%.pcap
echo.