Wireshark-bugs: [Wireshark-bugs] [Bug 10573] New: Allow to add custom fields based on filters ex
      
      
    
    
        
          | Bug ID | 10573 | 
        
          | Summary | Allow to add custom fields based on filters expressions | 
        
          | Product | Wireshark | 
        
          | Version | unspecified | 
        
          | Hardware | x86 | 
        
          | OS | All | 
        
          | Status | UNCONFIRMED | 
        
          | Severity | Enhancement | 
        
          | Priority | Low | 
        
          | Component | TShark | 
        
          | Assignee | bugzilla-admin@wireshark.org | 
        
          | Reporter | javibarroso@gmail.com | 
      
        
        Build Information:
$ tshark -v
TShark 1.12.1 (Git Rev Unknown from unknown)
Copyright 1998-2014 Gerald Combs <gerald@wireshark.org> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GLib 2.40.0, with libpcap, with libz 1.2.8, with POSIX
capabilities (Linux), with libnl 3, with SMI 0.4.8, with c-ares 1.10.0, with
Lua
5.2, without Python, with GnuTLS 3.3.7, with Gcrypt 1.6.2, with MIT Kerberos,
with GeoIP.
Running on Linux 3.16-2-amd64, with locale es_ES.UTF-8, with libpcap version
1.6.2, with libz 1.2.8.
       Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz
Built using gcc 4.9.1.
--
Hello,
I would like to distinguish frames from the tshark output, see this failed
attemp :
tshark -r mydump-20141015-185000.dump  -Y "frame contains a or frame contains
b" -T fields -e frame.time -e "frame contains a" -e "frame contains b"
I would like next output:
time1 0 1 # not comtains a and contains b
time2 1 1 # contains a and contains b
time3 1 0 # contains a and not contains b
Thank you very much !
PD: From
https://ask.wireshark.org/questions/37082/tshark-using-filter-_expression_-as-field
I was asked to open a new enhancemment bug.
         
      
      
      You are receiving this mail because:
      
      
          - You are watching all bug changes.