This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Expert information field

Hello,

I've updated tshark to actual version, i.e. 1.12. Unfortunately, in this version field filter -e expert is not working. (process:31133): WARNING : 'expert' isn't a valid field! tshark: Some fields aren't valid

How to resolve this issue?

Many thanks in advance!

filter linux

asked 20 Aug '14, 03:51

mrav
16●4●4●8
accept rate: 0%

One Answer:

2	Starting with Wireshark 1.12, you need to specify, `-e _ws.expert`. The `_ws.` prefix was added to make it clear that this is a Wireshark-generated field and not an actual field that's part of any particular protocol. answered 20 Aug '14, 06:46 cmaynard ♦♦ 9.4k●10●38●142 accept rate: 20%