Wireshark-users: Re: [Wireshark-users] Print wireshark option from command
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Tue, 16 Dec 2008 01:37:13 -0700
On Tue, Dec 16, 2008 at 01:37:53PM +0530, Hashmat Khan wrote:

> But how do I get this kind of output:

> 117.97.37.213         255.255.255.255       DHCP     68       67
> 0x39e5 (14821)
> 
> I want to print any source ip followed by any dest ip followed by 
> protocol type followed by src port, dest port and finally ip header 
> identification.

> tshark  -e ip.src -e ip.dst  -E separator=/s -T text -r my_dns.pcap
> 
> but it complained:
> tshark: Output fields were specified with "-e", but "-Tfields" was not
> specified.

You need to use -Tfields instead of -Ttext


Steve