Dear All. I have a question about tshark. Could you explain me why tshark doesn't support "export objects" like wireshark? I couldn't find anything comment related to my question. Please, advice me. Thank you asked 13 Nov '13, 11:59 honeycap78 |
2 Answers:
because nobody had the time and/or interest to implement that feature yet. If the "export objects" feature in GUI does not work for you (because you want to automate it), there are other (CLI) tools.
Maybe one of those will help you. Regards answered 14 Nov '13, 04:22 Kurt Knochner ♦ |
As of Wireshark 2.3.0, you can export HTTP objects with tshark. (Wireshark 2.3.0 hasn't been released yet, so you can grab a daily build from here.) To extract HTTP objects from the command-line, run the following command:
answered 15 Dec '16, 16:52 moshe |