Wireshark-bugs: [Wireshark-bugs] [Bug 12269] Export packets list as a picture
Date: Tue, 22 Mar 2016 18:31:23 +0000

Comment # 5 on bug 12269 from
(In reply to alex from comment #4)
> 1) headers are not displayed even with -Eheader=y option
> 2) formatting is ugly (i.e. some fields can be empty so columns are not
> aligned and output is very hard to read)

The "-E header=y" option is meant to be used with "-T fields" and when using
"-T fields", you can also specify the field separator with the "-E
separator=/t" option, although in most cases, the default <tab> character
should work fine.  

This would allow you to create a tab-delimited file that could be easily
imported into something like Excel, with empty fields being properly aligned
under the correct column.  For example.

    tshark.exe -T fields -E header=y -E separator=/t -e frame.number -e
_ws.col.Info -r file.pcap -Y "some filter" > file.txt

Specify as many "-e <field>" options as you need.

To import the file into Excel, refer to these instructions:
https://support.office.com/en-us/article/Import-or-export-text-txt-or-csv-files-5250ac4c-663c-47ce-937b-339e391393ba

If you don't have Excel, then refer to the instructions relevant to your
application.

More details: https://www.wireshark.org/docs/man-pages/tshark.html


You are receiving this mail because:
  • You are watching all bug changes.