ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: Re: [Wireshark-users] Packet List 'Info' column

From: Nicole Powell <mznikkip@xxxxxxxxxxx>
Date: Thu, 29 Oct 2009 10:47:45 -0400
When I use this I get the error:
Could not open file: 'eap.xml', error: No such file or directory
tshark: Invalid -o flag "column.format:'No.,%m,Info,%i"

I have never seen this file before nor do I know where it would be located. I am using version 1.2.1 on Windows, does that make a difference?


Nicole
 





> Date: Thu, 29 Oct 2009 15:27:03 +0100
> From: j.snelders@xxxxxxxxxx
> To: wireshark-users@xxxxxxxxxxxxx
> Subject: Re: [Wireshark-users] Packet List 'Info' column
>
> Hi Nicole,
>
> You can use TShark: http://www.wireshark.org/docs/man-pages/tshark.html
>
> Use the option -o <preference setting>
> "No.","%m" = frame number
> "Info","%i" = info column
>
> $ tshark -r test.pcap -o column.format:'"No.","%m","Info","%i"' > info.txt
> 1 Standard query A www.google.co.uk
> 2 Standard query response CNAME www.google.com CNAME www.l.google.com A
> 74.125.77.147 A 74.125.77.99 A 74.125.77.103 A 74.125.77.104
> 3 1685 > 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460
> 4 80 > 1685 [SYN, ACK] Seq=0 Ack=1 Win=5720 Len=0 MSS=1460
> 5 1685 > 80 [ACK] Seq=1 Ack=1 Win=65535 Len=0
> 6 GET / HTTP/1.1
> 7 80 > 1685 [ACK] Seq=1 Ack=314 Win=6432 Len=0
> 8 [TCP Previous segment lost] Continuation or non-HTTP traffic
> 9 [TCP Dup ACK 6#1] 1685 > 80 [ACK] Seq=314 Ack=1 Win=65535 Len=0 SLE=204
> SRE=1634
> 10 Continuation or non-HTTP traffic
>
> HTH
> Joan
>
> On Thu, 29 Oct 2009 08:07:01 -0400 Nicole Powell wrote:
> >Subject: [Wireshark-users] Packet List 'Info' column
> >
> >Is there a way to export the columns of the packet list pane (namely the
> >'info' column) into a txt or csv file?
> >
>
>
>
>
>
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe