Wireshark mailing list archives
Re: Change amount of bytes per line with tshark -x
From: Guy Harris <guy () alum mit edu>
Date: Mon, 7 Aug 2017 11:17:52 -0700
On Aug 7, 2017, at 7:16 AM, Remy Leone <remy.leone () inria fr> wrote:
tshark -x is very useful to get packets dumps like this one: 000000 00 0e b6 00 00 02 00 0e b6 00 00 01 08 00 45 00 000010 00 28 00 00 00 00 ff 01 37 d1 c0 00 02 01 c0 00 000020 02 02 08 00 a6 2f 00 01 00 01 48 65 6c 6c 6f 20 000030 57 6f 72 6c 64 21 000036 I was wondering if it is possible to instruct tshark to have a complete hexdump of a packet on a single line.
No, it's not. The main purpose of the dump is human readability; a one-line dump is unlikely to be very human-readable, so that format would presumably be primarily intended for machine-readability. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Change amount of bytes per line with tshark -x Remy Leone (Aug 07)
- Re: Change amount of bytes per line with tshark -x Guy Harris (Aug 07)