Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] how can I use tshark to export data as ascii via command line

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "Andrew Cuthbertson" <cuthbertson@xxxxxxxxxxxxx>
Date: Tue, 4 Nov 2008 13:57:23 +0100

Hi

1.       I want to export the data field as ascii from a command line. I use tshark to export fields of interest

tshark.exe -r  input.enc > output.txt  -E separator=; -E header=y -T fields -e frame.number -e data.data  

But this gives me the hex and I would like the ascii equivalent. How can I export the format I want via command line or convert it?

2.       I export many fields with –T field command but it gives the raw values. I would like to get the decoded values. Is there any way of doing this? I know there are some limited values available via the –o column command.

 

Andrew

  • Follow-Ups:
    • Re: [Wireshark-users] how can I use tshark to export data as ascii via command line
      • From: j . snelders
  • Prev by Date: [Wireshark-users] Decode PCLI procol v1.5
  • Next by Date: Re: [Wireshark-users] Wireshark-users Digest, Vol 30, Issue 3
  • Previous by thread: [Wireshark-users] Decode PCLI procol v1.5
  • Next by thread: Re: [Wireshark-users] how can I use tshark to export data as ascii via command line
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation