Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 12763] tshark print 'TCP flags' with non-ascci chars on so

Date: Sat, 20 Aug 2016 10:56:00 +0000

Comment # 6 on bug 12763 from
I should have mentioned that this problem occurs with a SSH client.
I know now that this client don't support UTF-8.

Setting LANG=C, I got:

$ ./tshark -V -r pkt-1.pcap
[...]
        [TCP Flags: ???????AP???]
[...]

$ ./tshark -r pkt-1.pcap 
  1 0.000000000 192.139.46.66 ? 192.168.108.129 TCP 1506 [TCP segment of a
reassembled PDU]

With the first setup (LANG=C.UTF-8):

$ locale
LANG=C.UTF-8
LANGUAGE=
LC_CTYPE="C.UTF-8"
LC_NUMERIC="C.UTF-8"
LC_TIME="C.UTF-8"
LC_COLLATE="C.UTF-8"
LC_MONETARY="C.UTF-8"
LC_MESSAGES="C.UTF-8"
LC_PAPER="C.UTF-8"
LC_NAME="C.UTF-8"
LC_ADDRESS="C.UTF-8"
LC_TELEPHONE="C.UTF-8"
LC_MEASUREMENT="C.UTF-8"
LC_IDENTIFICATION="C.UTF-8"
LC_ALL=

$ env | grep -i utf
LANG=C.UTF-8

$ ./tshark -V -r pkt-1.pcap | LESSCHARSET=utf-8 less
[...]
        [TCP Flags: ·······AP···]
[...]

$  ./tshark -r pkt-1.pcap | LESSCHARSET=utf-8 less
  1 0.000000000 192.139.46.66 â 192.168.108.129 TCP 1506 [TCP segment of a
reassembled PDU]

$ ./tshark -E bom=y -V -r pkt-1.pcap | less
[...]
        [TCP Flags: ·······AP···]
[...]

$ ./tshark -E bom=y -r pkt-1.pcap | less
  1 0.000000000 192.139.46.66 â 192.168.108.129 TCP 1506 [TCP segment of a
reassembled PDU]


You are receiving this mail because:
  • You are watching all bug changes.