Wireshark mailing list archives

Re: Help in displaying specific columns


From: Sake Blok <sake () euronet nl>
Date: Mon, 20 Sep 2010 19:24:20 +0200

On 20 sep 2010, at 19:11, yuva raj wrote:

Using tethereal

Tethereal is real old, development of it stopped more than 4 years ago... please upgrade to tshark (included with 
wireshark), available at www.wireshark.org

, I have captured the required packets in a pcap file. I am trying to display frame.number, ip.id and ip.frag_offset 
on the terminal(stdout).  Please provide me necessary options to be given to do the same.

In tshark, that would be:

tshark -r <file> -T fields -e frame.number -e ip.id -e ip.frag_offset

This functionality was not yet implemented in tethereal.

Cheers,


Sake

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: