Wireshark · Wireshark-users: [Wireshark-users] <Help>extract some fields using tshark

[Leon Liu <leon.jun.liu@xxxxxxxxx>]

hi all,

 

now i want to extract some fields from message 'Attach request' using tshark. i know that option '-e' in tshark can assign the field name. but the field i want to extract has no field name, just shown as text when i copy its fieldname.

 

does anyone know how to solve this?

 

thank you!