This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi

I had the current version of Wireshark1.10.2 on my laptop (Mac Os) and desktop (windows 7) I tried this script in terminal and it is working on Mac Os, but whenever I try it in Windows 7 command terminal, I get this error:

tshark: Invalid -o flag "column.format:'No.,%m,"

Why it is working in Mac os but not in windows !!!!!

Please Help me :)

tshark -Y "ip" -o column.format:'"No.","%m", "full time", "%Yt","src ip", "%us","des ip","%ud", "lenght", "%L","transfered byte", "%B","protocol","%p","srcmac","%uhs","destmac","%uhd","sourceport", "%uS", "destport", "%uD", "Info", "%i"' -r test.pcap >test.txt

tshark: Invalid -o flag "column.format:'No.,%m,"

Thanks in advance

asked 17 Jan '14, 11:46

Payam365's gravatar image

Payam365
21225
accept rate: 0%


The problem is quoting. You need to escape all the quotes using \" except for the outermost quotes. The development version of tshark adds a -G column-formats option that, besides listing all available column formats, provides the following example at the end of the output:

For example, to print Wireshark's default columns with tshark:

tshark.exe -o "gui.column.format:\"No.\",\"%m\",\"Time\",\"%t\",\"Source\",\"%s\",\"Destination\",\"%d\",\"Protocol\",\"%p\",\"Length\",\"%L\",\"Info\",\"%i\""

permanent link

answered 17 Jan '14, 12:07

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×832
×103

question asked: 17 Jan '14, 11:46

question was seen: 2,796 times

last updated: 17 Jan '14, 12:07

p​o​w​e​r​e​d by O​S​Q​A