This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Expert information field

0

Hello,

I've updated tshark to actual version, i.e. 1.12. Unfortunately, in this version field filter -e expert is not working. (process:31133): WARNING : 'expert' isn't a valid field! tshark: Some fields aren't valid

How to resolve this issue?

Many thanks in advance!

asked 20 Aug '14, 03:51

mrav's gravatar image

mrav
16448
accept rate: 0%


One Answer:

2

Starting with Wireshark 1.12, you need to specify, -e _ws.expert. The _ws. prefix was added to make it clear that this is a Wireshark-generated field and not an actual field that's part of any particular protocol.

answered 20 Aug '14, 06:46

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%