Hi, Can tshark export statistics to a parse-able format such as comma or tab delimited? Thanks asked 01 Jun '16, 11:34 Rob B |
One Answer:
It can present row data out of packets in comma-delimited format (using '-T fields -e example.field1 -e example.field2 -E separator=","' for example to print comma-delimited values of example.field1 and example.field2). Now, for counters (such as those produced with "-z io,stat," option), it doesn't present it in anything "clean" like a .csv output but it does produce output for which you can write a perl wrapper around it to get it into .csv format. Note, there is an active feature request in the Wireshark bugzilla requesting the ability for Tshark to do exactly what you're asking. If you vote for it, that might help? :) https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10759 answered 03 Jun '16, 20:31 Quadratic |