tshark.exe -i 1 -P -V -S \"End of Packet\" -x
gives all the required data of the packet, packet detail as well as packet bytes
but how can I split the Frames Ethernet IP Version TCP
etc
tried using :
-E<fieldsoption>=<value> set options for output when -Tfields selected:
header=y|n switch headers on and off
separator=/t|/s|<char> select tab, space, printable character as separator
occurrence=f|l|a print first, last or all occurrences of each field
aggregator=,|/s|<char> select comma, space, printable character as
aggregator
Thanks, in advance
asked 19 Nov '14, 01:59
erarijit
21●4●5●9
accept rate: 0%
no I didn't added -T fields
can you show me an example if you have?
I've corrected my answer a bit. Use
-T fields
to switch to fields mode, use-E
to set field options such as separator and quotes and then use multiple-e fieldname
parameters to specify the fields.There are examples of the parameters in the tshark man page, and Google and this site should show you lots more.