Wireshark · Wireshark-users: [Wireshark-users] Trying to parse vlan packets using TShark

["Idan Zeierman" <idan315@xxxxxxxxx>]

Hello.

I'm trying to get TShark to parse packets containing vlan (over ethernet). As far as I've understood - I should use the '-d' parameter for that. Hence, I've tried to use the following parameters:
-l -T pdml -i- -d eth.type==0xffff,vlan

Using the '-l -T pdml -i-' part works fine, but adding the -d parameter makes Tshark return no information on the packet (not even an empty xml).

Do you have any idea what might be the problem? I'm desperate for any help that you can give me...

Other attempts that failed:
-l -T pdml -i- -d eth,vlan
-l -d vlan -T pdml -i-
-l -d eth.type=65535,vlan -T pdml -i-

Thanks in advance!