ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] how to show protocol with tshark

From: Jeff Morriss <jeff.morriss.ws@xxxxxxxxx>
Date: Tue, 05 Jun 2012 10:00:40 -0400
nangergong wrote:
HI, all:

In wireshark, I can see protocol names such as "TCP","UDP","DHCPV6", "LLMNR", is it possible to use tshark to show these protocol names, especially with "-e", thanks!

Does this do what you want?

tshark -T fields -eframes.protocols -nr /path/to/file.pcap