Wireshark · Wireshark-dev: Re: [Wireshark-dev] Need to export IP Packet length to a CSV file from a captured .cap file

[Sake Blok <sake@xxxxxxxxxx>]

> I needed some help on exporting data captured in .cap
> to a CSV file.
> My main intention to capture the following feilds.
> Source Address, Destination Address, Source POrt
> Destination Port and IP Packet Length.
> 
> I am able to export all but the last field i.e. IP
> Packet length. I don't want the packet bytes but
> specifically want the IP Total Length field.

How about:

tshark -i 7 -T fields -e ip.src -e tcp.srcport -e ip.dst -e tcp.dstport -e ip.len

Hope this helps, Cheers,


Sake