This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

“user_dlt” option in tshark?

0

GUI based wireshark provide USER_DLT Encapsulation. Command based tshark provide same or even a similar option?

thanks.

asked 09 Sep '13, 05:03

kingko's gravatar image

kingko
1●2●2●2
accept rate: 0%

One Answer:

2

Hi,

with tshark you can use the following command line as an example:

tshark.exe" -o "uat:user_dlts:\"User 15 (DLT=162)\",\"payload protocol\",\"header size\",\"header protocol\",\"trailer size\",\"trailer protocol\""

answered 09 Sep '13, 07:02

Pascal%20Quantin's gravatar image

Pascal Quantin
5.5k●10●60
accept rate: 30%

-o "uat:user_dlts:

nice, I did not know about that feature.

Shouldn't that be part of the tshark man page? ;-)

(09 Sep '13, 07:54) Kurt Knochner ♦