Question

I'm trying to run a script which will allow me to export all my pcap files into plaintext versions like with wireshark.

My issue is that I need to have packet summary line, packet details expanded, packet bytes, and each packet on new page under the packet format options. I believe packet summary line is on by default, packet details are "as displayed" using -V flag.

This is the man page I've been using.

I have used the command:

tshark -V -r "$file" >> TEXT_out.txt;

Any assistance would be appreciated.

Was it helpful?

Solution

I need to have packet summary line, packet details expanded, packet bytes

tshark -PVx -r "$file" >>TEXT_out.txt, at least with newer versions of TShark.

and each packet on new page

Not supported in TShark, unfortunately.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top