Wireshark · Wireshark-dev: [Wireshark-dev] tshark -T fields

Wireshark-dev: [Wireshark-dev] tshark -T fields

From: Peter Gordon <peter@xxxxxxxxxxxxxxxxxx>

Date: Wed, 07 Jul 2010 15:27:25 +0300

tshark can be used to display fields using the -T option.
If the same field occurs a number of times within a protocol,
only one value ( the last ) gets displayed.

As far as I can see the error looks like it comes from the 
routine proto_tree_write_fields. 

The -T pdml option gives the correct output, but is too voluminous.

Can anyone help with a fix?

Peter

Follow-Ups:
- Re: [Wireshark-dev] tshark -T fields
  - From: Jeff Morriss

Prev by Date: Re: [Wireshark-dev] About the netmask (Was:Wireshark-commits: [Wireshark-commits] rev 33461: /trunk/gtk/ /trunk/gtk/: capture_dlg.c)
Next by Date: Re: [Wireshark-dev] FW: Comitt "Catch some cases that don't currently work." broke a use case of tshark
Previous by thread: Re: [Wireshark-dev] FW: Comitt "Catch some cases that don't currently work." broke a use case of tshark
Next by thread: Re: [Wireshark-dev] tshark -T fields
Index(es):
- Date
- Thread