Wireshark mailing list archives
Re: tshark jump to frame number
From: M Holt <m.iostreams () gmail com>
Date: Thu, 25 Feb 2010 07:42:24 -0800
Yeah, I got it -- my bad... :) On Thu, Feb 25, 2010 at 5:42 AM, Jaap Keuter <jaap.keuter () xs4all nl> wrote:
Hi, Hmm, lets look at the manual page. -V verbose, oke we take that one. -R read filter in display filter syntax. Sounds good: frame.number == <n> -r read capture file. Indeed. Here we go:tshark -V -R frame.number==<n> -r <capturefile>And there you have it. Frame n in all its glory. Thanks, Jaap On Thu, 25 Feb 2010 05:24:37 -0800, M Holt <m.iostreams () gmail com> wrote:Hello, I would like to know how to use tshark to "jump" to a specific frame number. In Wireshark, it's ctrl-g, so I am hoping that there is something similar in tshark. I would like to be able to print a single known packet verbosely, meaning all packet information, for one single known packet. I have tried using -T fields -e frame.number == , but that does not give the expected results. If this is possible, is it also possible to display more than one? Say a list, or a range? Thanks in advance, Mike___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org ?subject=unsubscribe
___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- tshark jump to frame number M Holt (Feb 25)
- Re: tshark jump to frame number M Holt (Feb 25)
- Re: tshark jump to frame number Jaap Keuter (Feb 25)
- Re: tshark jump to frame number M Holt (Feb 25)