Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 11401] New: CSV values missing when using tshark -2 option

[bugzilla-daemon@xxxxxxxxxxxxx]

Bug ID	11401
Summary	CSV values missing when using tshark -2 option
Product	Wireshark
Version	1.12.6
Hardware	x86-64
OS	Windows 7
Status	UNCONFIRMED
Severity	Major
Priority	Low
Component	TShark
Assignee	bugzilla-admin@wireshark.org
Reporter	paul.offord@advance7.com

Build Information:
TShark 1.12.6 (v1.12.6-0-gee1fce6 from master-1.12)

Copyright 1998-2015 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled (64-bit) with GLib 2.38.0, with WinPcap (4_1_3), with libz 1.2.5, with
SMI 0.4.8, with c-ares 1.9.1, with Lua 5.2, without Python, with GnuTLS 3.2.15,
with Gcrypt 1.6.2, without Kerberos, with GeoIP.

Running on 64-bit Windows 7 Service Pack 1, build 7601, without WinPcap.
Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz, with 8082MB of physical memory.


Built using Microsoft Visual C++ 10.0 build 40219
--
Hi,

I have a short SQL/TDS trace and I want to output certain columns into CSV. If
I run this command:

tshark -T fields -E separator=, -E quote=d -e frame.number -e ip.addr -e
_ws.col.Info -r tds_sql_batch_first_10.pcapng
I get:

"1","10.100.20.223,10.100.20.220","1155â┼'1433 [ACK] Seq=3698378077
Ack=2551614322 Win=65535 Len=0"
"2","10.100.20.223,10.100.20.220","1154â┼'1433 [ACK] Seq=3762048005
Ack=3002787638 Win=65113 Len=0"
"3","10.100.20.223,10.100.20.220","SQL batch"
"4","10.100.20.220,10.100.20.223","Response"

If I run the same commend with the -2 option like this:

tshark -T fields -E separator=, -E quote=d -e frame.number -e ip.addr -e
_ws.col.Info -r tds_sql_batch_first_10.pcapng

I get:

"1","10.100.20.223,10.100.20.220",
"2","10.100.20.223,10.100.20.220",
"3","10.100.20.223,10.100.20.220",
"4","10.100.20.220,10.100.20.223",

So the Info column information is missing. I get a similar problem when I add a
column from a field defined by a LUA script.

Thanks and regards...Paul

---

      You are receiving this mail because:

• You are watching all bug changes.