Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] how to send tshark GRE decoded packets only into a file readab

From: "Noel, Andre (6024395)" <andre.noel@xxxxxxx>
Date: Thu, 5 Mar 2015 10:46:17 -0500

 

Hello,

 

I’m using tshark to  decode  GRE and it working fine using this command :    tshark -d gre.proto==0,eth –r  <MyFilemane> (I  use also  the switch –V to see more details)

 

I get this:   309 192.168.40.20 -> 224.0.0.18   VRRP Announcement (v2) 110 10.500043720 0.393136560 10.500043720 2015-02-26 22:14:11.118772620   (  with –V I get all the fields as seen in Wireshark)

 

It’s good but I can only see the result on screen or   send them into a text file using “ >  MyFile.txt”

 

The question is, is there a way I can save the result (decoded GRE)  into a file so I could reopen it with Wireshark ?   I did not find a way so far…

 

Regards.

 

Andre