Вопрос

I'm trying to run a script which will allow me to export all my pcap files into plaintext versions like with wireshark.

My issue is that I need to have packet summary line, packet details expanded, packet bytes, and each packet on new page under the packet format options. I believe packet summary line is on by default, packet details are "as displayed" using -V flag.

This is the man page I've been using.

I have used the command:

tshark -V -r "$file" >> TEXT_out.txt;

Any assistance would be appreciated.

Это было полезно?

Решение

I need to have packet summary line, packet details expanded, packet bytes

tshark -PVx -r "$file" >>TEXT_out.txt, at least with newer versions of TShark.

and each packet on new page

Not supported in TShark, unfortunately.

Лицензировано под: CC-BY-SA с атрибуция
Не связан с StackOverflow
scroll top