I have some network traffic in the form of a The method I have tried to use is using Tshark to extract the fields I am interested in, and write them into a
The problem with this is that tshark does not parse the values of fields properly when putting them into the For example if there are two fields:
and this is how it turns out in the database table:
The question is that how do I fix this? Any tips/suggestions/advice is welcome. asked 10 Oct '16, 21:31 Jesss edited 10 Oct '16, 22:06 |
One Answer:
It's not that tshark creates two instances of the field, it's that tshark does not treat fields which contain the comma symbol specially, so the commas from inside the fields are indistinguishable from the commas separating the instances of the same field for the application processing the csv. Look at the answered 10 Oct '16, 22:18 sindy |