Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Change amount of bytes per line with tshark -x

From: Remy Leone <remy.leone@xxxxxxxx>
Date: Mon, 07 Aug 2017 14:16:28 +0000
Hello,

tshark -x is very useful to get packets dumps like this one:


           000000 00 0e b6 00 00 02 00 0e b6 00 00 01 08 00 45 00
           000010 00 28 00 00 00 00 ff 01 37 d1 c0 00 02 01 c0 00
           000020 02 02 08 00 a6 2f 00 01 00 01 48 65 6c 6c 6f 20
           000030 57 6f 72 6c 64 21
           000036

I was wondering if it is possible to instruct tshark to have a complete hexdump of a packet on a single line. For instance with "a bytes_per_line" settings? Would this long line be successfully parsed with tools such as text2pcap?

Best regards

Rémy