Wireshark-users: Re: [Wireshark-users] use tshark to search for hex or ASCII string in packet?

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Wed, 9 Jan 2008 16:02:03 -0700

On Wed, Jan 09, 2008 at 11:45:33PM +0100, Marc Luethi wrote:

> tshark -r file.pcap -T fields -e data
> 
> This yields to output in hex, which I could cope with, but it lacks 
> the timestamp.

You could add -e frame.time to get the frame's arrival time also.


Steve