How can you export a list of unique IP addresses using Tshark?

• A. tshark -r file.pcap -T fields -e ip.src | sort | uniq
• B. tshark -r file.pcap -T json
• C. tshark -r file.pcap -e dns.query.name
• D. tshark -r file.pcap -V

Answer: (D)

The key idea is having visibility of the IP address fields from every packet so you can collect them and remove duplicates. Using the verbose dissection option prints the full per-packet details, including the IP header information such as ip.src and ip.dst for each frame. With that complete dump, you can scan through and extract all IP addresses, then deduplicate to produce the list of unique addresses. This approach ensures you see the IP data for every packet, which you can then filter to get the unique set. Other options either focus on specific fields requiring an extra dedup step, target DNS-related data, or output data in a form that isn’t as straightforward for building a unique IP list.