Aliasing MAC Addresses with Wireshark

I love Wireshark, but one thing is for sure: tracking 802.11 conversations with my human brain is difficult. Coloring rules help, but I find it very difficult to remember which MAC address is which wireless station.

Fortunately, Wireshark has the ability to alias IP and MAC addresses! These are defined in the "ethers" file. You should be able to do nearly the same thing on Windows, but here's how to do it on macOS.


1. Open a terminal, and run:

nano ~/Users/your_username/.config/wireshark/ethers



2. Define the MAC address and the desired alias in the file. Separate the MAC and alias with any number of spaces. Aliases themselves can't contain spaces.

ab:cd:ef:12:34:56 (AP)Aruba205H
12:34:56:ab:cd:ef (Client)Nokia6.1
ab:12:ef:cd:34:56 (Client)MacBookPro




Tip: I like to lead with either (AP) or (Client) so I can immediately tell which side is talking.

3. Save the file by pressing Ctrl+X, then Y for yes, then Enter.

4. Restart Wireshark, and now friendly, readable aliases will appear in place of MAC addresses.


Appending the 'ethers' File

You can quickly add new MAC addresses to your file with cat.

1. In the terminal, run this line:

cat >> /Users/your_username/.config/wireshark/ethers

Warning: Don't use just one ">", if you do, cat will overwrite the entire file, so don't mess that up.

2. Press Enter, which will start a new line. Add any new hosts, line by line.

ab:cd:ef:12:34:56 (AP)Aruba205H
12:34:56:ab:cd:ef (Client)Nokia6.1
ab:12:ef:cd:34:56 (Client)MacBookPro

3. Press ctrl + d to write the additions to the file.

Copying MAC Addresses from Wireshark

It's fast and easy to copy MAC addresses out of Wireshark, and you can paste them into the terminal.

1. Find the transmitter, receiver, source, or destination frame in the Packet Details pane, and right-click it.

2. Select Copy > Value to copy out the MAC.



3. Paste into the terminal with command + v.

Comments

  1. Project Manus in collaboration with MITCopytechrun a service where members of the MIT neighborhood can submit 3D print jobs online, then we 3D print them for you and allow you to} know when you job is ready for pickup. Simply addContent your file and we'll ship you a free quote with no strings attached. From the market leaders in automotive to entertainment, BigRep’s companions are a few of the the} leading industrial players in automotive, machining, Sweater Dress aerospace and industrial manufacturing. The Stockholm-based product design agency, Splitvision Design, is among the many first Nordic firms to spend money on|put cash into} 3D Systems’ Figure 4® Standalone three... Polyjet material offering nice details and hyperrealism simulating each versatile and rigid multi-colour 3D fashions.

    ReplyDelete
  2. In different phrases, it doesn’t matter which platform (mobile/desktop) you play on. There are not any cell playing apps either, as there are not any local South Korean on-line casinos. The best on-line casinos in South Korea are those may be} primarily based offshore. While might be} a tough task, with the federal government doing its best to ban access to the most effective on-line on line casino sites, South Koreans nonetheless have access to plenty of nice international on-line casinos, including reside casinos. Despite having solely been in operation since 2018, the Betwinner Casino has already earned fairly the status. The likes of Microgaming, Evolution Gaming 카지노 μ‚¬μ΄νŠΈ and Betsoft deliver video games, with a great variety of slots, Roulette and Blackjack titles being discovered.

    ReplyDelete

Post a Comment