Wireshark · Ethereal-users: Re: [Ethereal-users] Little Problem

[Guy Harris <gharris@xxxxxxxxx>]

C7 wrote:
> I've tried the command:
>
> $ tethereal.exe -i 2 -f "tcp port 3128" -R http.request.method=="GET" -c 
> 20 -V > capture.txt
> But I get this for just one packet:
	[full dissection, of the type -V is intended to, and does, give you]

> I just need the line that gives me the HOST, and eventualy the source 
> and destination IP, and the hour. Do you know a option to add to the 
> command or a display filter, that gives me only these things?
If by "the hour" you mean the time stamp on the packet, there is no 
option to *add* to get that.
There's an option to *remove* to get that.

The option in question is "-V".  Running *without* that option:

	tethereal -i 2 -f "tcp port 3128" -R http.request.method=="GET" -c 20 > 
capture.txt
will give you the summary line, i.e. the information that shows up in 
the packet list in Ethereal.  That'll contain, by default, the source 
and destination host information, and the time stamp, as well as the 
protocol and the Info column.