This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

changing the preference using tshark

0

Hi I need to the change the preference settings so that the tshark will dissect the heuristic dissector first and i need to give a command for that since i cant use the gui (manager has told me to try using only cli so cant help) please help!

asked 18 Apr '11, 06:33

niks3089's gravatar image

niks3089
21●15●15●18
accept rate: 0%

One Answer:

3

tshark -o will do the trick.

-o name:value ... override preference setting

Use tshark -G defaultprefs to find the name of the pref you wish to change.

tshark -G defaultprefs gives a complete list of the default prefs

tshark -G currentprefs give a list of the currentprefs

I expect that in this case you'll want to do

tshark -o tcp.try_heuristic-first:TRUE

Also: you can use tshark -C to specify a particular profile to be used.

-C config_profile start with specified configuration profile

answered 18 Apr '11, 06:40

Bill%20Meier's gravatar image

Bill Meier ♦♦
3.2k●1●8●50
accept rate: 17%

edited 18 Apr '11, 06:55