Wireshark-bugs: [Wireshark-bugs] [Bug 1880] should provide an option to print tunnel encapsulati
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Mon, 8 Nov 2010 19:58:51 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1880

--- Comment #1 from Chris Maynard <christopher.maynard@xxxxxxxxx> 2010-11-08 19:58:46 PST ---
I'm not a tshark expert, but you can do something like:

tshark -c 10 -r <infile> -R "some filter" -T fields -e frame.number -e
frame.time -e ip.src -e ip.dst -e frame.protocols -E occurrence=a

The option to note here is "-E occurrence=a", which will print out all
occurrences of every field specified with a "-e" option, no matter how many
times that field is present in the packet.

Does this feature meet your needs?

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.