Wireshark-dev: Re: [Wireshark-dev] Need to export IP Packet length to a CSV file from a capture
From: Sake Blok <[email protected]>
Date: Tue, 30 Oct 2007 14:36:16 +0100
> I needed some help on exporting data captured in .cap
> to a CSV file.
> My main intention to capture the following feilds.
> Source Address, Destination Address, Source POrt
> Destination Port and IP Packet Length.
> I am able to export all but the last field i.e. IP
> Packet length. I don't want the packet bytes but
> specifically want the IP Total Length field.

How about:

tshark -i 7 -T fields -e ip.src -e tcp.srcport -e ip.dst -e tcp.dstport -e ip.len

Hope this helps, Cheers,