This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

tshark statistics to parse-able file

0

Hi,

Can tshark export statistics to a parse-able format such as comma or tab delimited?

Thanks

asked 01 Jun '16, 11:34

Rob%20B's gravatar image

Rob B
368813
accept rate: 0%


One Answer:

0

It can present row data out of packets in comma-delimited format (using '-T fields -e example.field1 -e example.field2 -E separator=","' for example to print comma-delimited values of example.field1 and example.field2).

Now, for counters (such as those produced with "-z io,stat," option), it doesn't present it in anything "clean" like a .csv output but it does produce output for which you can write a perl wrapper around it to get it into .csv format.

Note, there is an active feature request in the Wireshark bugzilla requesting the ability for Tshark to do exactly what you're asking. If you vote for it, that might help? :) https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10759

answered 03 Jun '16, 20:31

Quadratic's gravatar image

Quadratic
1.9k6928
accept rate: 13%