Wireshark · Wireshark-users: Re: [Wireshark-users] Help in displaying specific columns

[yuva raj <ubuntuv@xxxxxxxxx>]

Hi,

Can -z option could be of any help?  Because we have been using tethereal for a longer time.  We prefer not to discontinue it.  Please help me in this regard.  Atleast if possible, please provide examples for using -z option.

Thanks

uv

On Mon, Sep 20, 2010 at 10:24 AM, Sake Blok <sake@xxxxxxxxxx> wrote:

On 20 sep 2010, at 19:11, yuva raj wrote:

> Using tethereal

Tethereal is real old, development of it stopped more than 4 years ago... please upgrade to tshark (included with wireshark), available at www.wireshark.org

> , I have captured the required packets in a pcap file. I am trying to display frame.number, ip.id and ip.frag_offset on the terminal(stdout).  Please provide me necessary options to be given to do the same.

In tshark, that would be:

tshark -r <file> -T fields -e frame.number -e ip.id -e ip.frag_offset

This functionality was not yet implemented in tethereal.

Cheers,


Sake

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe