Wireshark-users: Re: [Wireshark-users] how can I use tshark to export data as ascii via command line

From: j.snelders@xxxxxxxxxx
Date: Tue, 4 Nov 2008 22:07:26 +0100

Hi Andrew,

To filter the packets that contain data:
$ tshark -r test.pcap -R data -w testdata.pcap

To print the data from the Packet Byte Pane (Hex and ASCII) 
$ tshark -r testdata.pcap -x > testdata.txt

HTH
Joan


On Tue, 4 Nov 2008 13:57:23 +0100 Andrew Cuthbertson wrote:
>Hi
>
>1.       I want to export the data field as ascii from a command line. I
>use
>tshark to export fields of interest
>
>tshark.exe -r  input.enc > output.txt  -E separator=; -E header=y -T fields
>-e frame.number -e data.data   
>
>But this gives me the hex and I would like the ascii equivalent. How can
>I
>export the format I want via command line or convert it?
>
>2.       I export many fields with -T field command but it gives the raw
>values. I would like to get the decoded values. Is there any way of doing
>this? I know there are some limited values available via the -o column
>command.
>
> 
>
>Andrew
>
>_______________________________________________
>Wireshark-users mailing list
>Wireshark-users@xxxxxxxxxxxxx
>https://wireshark.org/mailman/listinfo/wireshark-users