Yeah, I got it -- my bad... :)
On Thu, Feb 25, 2010 at 5:42 AM, Jaap Keuter
<jaap.keuter@xxxxxxxxx> wrote:
Hi,
Hmm, lets look at the manual page.
-V verbose, oke we take that one.
-R read filter in display filter syntax. Sounds good: frame.number == <n>
-r read capture file. Indeed.
Here we go:
> tshark -V -R frame.number==<n> -r <capturefile>
And there you have it. Frame n in all its glory.
Thanks,
Jaap
On Thu, 25 Feb 2010 05:24:37 -0800, M Holt <
m.iostreams@xxxxxxxxx> wrote:
> Hello,
>
> I would like to know how to use tshark to "jump" to a specific frame
> number.
> In Wireshark, it's ctrl-g, so I am hoping that there is something
> similar in tshark.
>
> I would like to be able to print a single known packet verbosely,
> meaning all packet information, for one single known packet.
> give the expected results.
>
> If this is possible, is it also possible to display more than one? Say
> a list, or a range?
>
> Thanks in advance,
> Mike
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
