Wireshark-users: Re: [Wireshark-users] tshark -T fields and info column
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Stig Bjørlykke <stig.bjorlykke@xxxxxxxxx>
Date: Sun, 25 May 2008 12:23:56 +0200
On 24. mai. 2008, at 20.25, wireshark@xxxxxxxxxxxx wrote:


Is it possible with tshark to output the regular column info (I'm
interested in the %i info field in particular) while also outputting
fields using -T fields with -e.



You can overwrite the column format with custom columns like this:
tshark -o column.format:'"No.", "%m", "Info", "%i", "Len", "%Cus:tcp.len"' 


--
Stig Bjørlykke