This is our old Q&A Site. Please post any new questions and answers at

Hey. I am new to wireshark & need some help. How can I make a xml file of wireshark data using tshark command? Tshark does not allow me to write anything initially. How to write a command on it?

asked 29 Jan '13, 03:18

Hamra%20Rehan's gravatar image

Hamra Rehan
accept rate: 0%

From the output of tshark -h:

-T pdml|ps|psml|text|fields
   format of text output (def: text)

And from the tshark man page:

-T pdml|psml|ps|text|fields

Set the format of the output when viewing decoded packet data. The options are one of:

pdml Packet Details Markup Language, an XML-based format for the details of a decoded packet. This information is equivalent to the packet details printed with the -V flag.

psml Packet Summary Markup Language, an XML-based format for the summary information of a decoded packet. This information is equivalent to the information shown in the one-line summary printed by default.

So you can use either -T pdml or -T psml depending on your needs.

permanent link

answered 29 Jan '13, 03:32

grahamb's gravatar image

grahamb ♦
accept rate: 22%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text]( "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:


question asked: 29 Jan '13, 03:18

question was seen: 10,516 times

last updated: 29 Jan '13, 03:32

p​o​w​e​r​e​d by O​S​Q​A