Wireshark · Wireshark-users: Re: [Wireshark-users] Howto: set some column to print?

["Rob MacKenzie" <rmackenzie@xxxxxxx>]

#tshark -i 3  -o column.format:'"Info", "%i"'

 

That will just print the info column from Wireshark.

 

You can not specify the info column from the �Ce option in tshark.

 

-Rob MacKenzie

---

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of ???
Sent: March 27, 2008 8:20 AM
To: wireshark-users
Subject: [Wireshark-users] Howto: set some column to print?

 

Hi,

 

Jaap, Thank you very much!

 

Can you tell me how to set some column to print?

 

http://www.wireshark.org/docs/man-pages/tshark.html

 

#TShark -i 3 -e tcp.port -T fields   //It can print port

#TShark -i 3 -e frame.number        //It can print frame number

 

Now I want to print info column(In wireshark window display No,Time,Source,Destination,Protocol,Info, I want the last column, only the last column),Can you help me?

Can you tell me how to set the command line params ? Or Where I can find the doc?

 

Thank you !!!

 

 

2008-03-27

---

赵新元

---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.