Wireshark-users: Re: [Wireshark-users] Help in displaying specific columns
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Sake Blok <sake@xxxxxxxxxx>
Date: Mon, 20 Sep 2010 19:24:20 +0200
On 20 sep 2010, at 19:11, yuva raj wrote:

> Using tethereal

Tethereal is real old, development of it stopped more than 4 years ago... please upgrade to tshark (included with wireshark), available at www.wireshark.org

> , I have captured the required packets in a pcap file. I am trying to display frame.number, ip.id and ip.frag_offset on the terminal(stdout).  Please provide me necessary options to be given to do the same.

In tshark, that would be:

tshark -r <file> -T fields -e frame.number -e ip.id -e ip.frag_offset

This functionality was not yet implemented in tethereal.

Cheers,


Sake