Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] print literal test with -T fields

From: Mathias Koerber <mathias@xxxxxxxxxxx>
Date: Mon, 28 Apr 2014 13:13:31 +0800
Is there a way in tshark(1) to include some literal text
between printer fields names?

I'm trying to do something like

 -T fields -e 'trunc:' -e dns.flags.truncated

ie, print a sizeable list of fields I am interested in, but since many
(boolean) fields look the same prefix them with their names..