Wireshark mailing list archives

tshark -T fields


From: Peter Gordon <peter () pg-consultants com>
Date: Wed, 07 Jul 2010 15:27:25 +0300

tshark can be used to display fields using the -T option.
If the same field occurs a number of times within a protocol,
only one value ( the last ) gets displayed.

As far as I can see the error looks like it comes from the 
routine proto_tree_write_fields. 

The -T pdml option gives the correct output, but is too voluminous.

Can anyone help with a fix?

Peter

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe


Current thread: