Please help me. Thanks in advance!!! asked 29 Nov '13, 22:58  Eliza Rana |
One Answer:
If you only want the timestamp, protocol and packet length, then one way would be to first configure your columns so that only those columns of interest are shown (done via answered 30 Nov '13, 11:13  cmaynard ♦♦ showing 5 of 12 show 7 more comments |
Thank so much for ur answer. Anyway, I am trying to transform my file "test.pcap" to "test.csv" by using command prompt. Here is what i wrote:
And when i press enter, it said "Access is denied".
So what should i do with this?
It would appear that you don't have write access to
d:\. Try it first without redirecting the output to a file to see if the rest of the command works. If so, then you may have to write the file to another location.By the way, you may need to quote the fields via
-E quote=d, since theframe.timefield will contain a comma.Really thanks for your help, cmaynard. I will try like you told me.
Hi cmaynard. I had followed you and the other commands really work. But, when I changed the location file to drive C, it still says Access is denied. So what should I do in order to create this csv file? Please help me...Now I am using Windows 7.
if you're getting the correct output but just can't redirect it to a file due to the "Access is denied" problem, then it would seem that you don't have write access to that location either. Find a drive/directory location where
echo "Hello World!" > hello.txtworks and likely the redirection of thetsharkoutput will work as well.I don't really understand this. Could you explain in more details please?
I think maybe I had a problem with using cmd command prompt. When I first opened it, It appears: C:\Users\Teang
So then the installation directory where
tshark.exeresides, most likelyC:\Program Files\Wiresharkapparently isn't in yourPATH. This means you'll have to specify the full path yourself or add the location to thePATHif you want to runtshark.exewithout specifying the full path. Either that, or you'll have to change to that directory but then you'll still have to remember to redirect output to a directory in which you have write access.So you mean I must use tshark command by running the tshark.exe?
Could you please tell me how to do this cmaynard? I am really new to Wireshark, and I really need your help right now.
Either
tsharkortshark.exewill work, but on Windows, the executable istshark.exe, so that's how I document/describe it. You can typetsharkif you want though.Thanks cmaynard. Now I can get the csv file...:)