automated save as plain text

Question

in my project i need to save the captured packets info as plain text with only packet source ip destionation ip source mac destination mac

Answer 1

0

Please try this

tshark -nr input.pcap -T fields -e eth.src -e eth.dst -e ip.src -e ip.dst

Regards
Kurt

answered 06 Apr '14, 23:56

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

i need to capture from wireshark not from a pcap file sir input.pcap error:"tshark: The file "input.pcap" doesn't exist." and i have to export packet dissections as plain text automatically

(07 Apr '14, 00:54) vengatesh

Answer 2

i need to capture from wireshark not from a pcap file

Then try

tshark -i interface -T fields -e eth.src -e eth.dst -e ip.src -e ip.dst

where "interface" is the network interface on which you're capturing.