Wireshark-users: Re: [Wireshark-users] how to show protocol with tshark
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: nangergong <nangergong@xxxxxxxxx>
Date: Tue, 5 Jun 2012 18:47:35 +0200
yes, thanks

On Tue, Jun 5, 2012 at 4:00 PM, Jeff Morriss <jeff.morriss.ws@xxxxxxxxx> wrote:
nangergong wrote:
HI, all:

    In wireshark, I can see protocol names such as "TCP","UDP","DHCPV6", "LLMNR", is it possible to use tshark to show these protocol names, especially with "-e", thanks!

Does this do what you want?

tshark -T fields -eframes.protocols -nr /path/to/file.pcap
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
           mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe