Wireshark-bugs: [Wireshark-bugs] [Bug 10599] Allow -E aggregator field print option to accept a
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 22 Oct 2014 16:54:07 +0000

changed bug 10599


What Removed Added
Summary Display mysql.row.text 1 line per row Allow -E aggregator field print option to accept a new line character

Comment # 10 on bug 10599 from 
As stated in tshark manpage:

-E <field print option>

    Set an option controlling the printing of fields when -T fields is
selected.

    Options are:
[...]
    aggregator=,|/s|<character> Set the aggregator character to use for fields
that have multiple occurrences. If , a comma will be used (this is the
default), if /s, a single space will be used. Otherwise any character that can
be accepted by the command line as part of the option may be used.

So here if I understand properly, the request is to be able to use -E
aggregator=/n so as to display each occurrence of the mysql.row.text field
within a given packet on a new line, right?
But in that case, how an automated tool would make the difference between 2
text entries within the same packet, or from 2 different packets? By using the
-E quote option?
If implemented, I guess it should also be added to the -E separator option.

Note that when displaying the packet content with tshark -O mysql -r
mysql.pcap, you get several lines.

You are receiving this mail because:
  • You are watching all bug changes.