Ethereal-users: Re: *****SPAM***** RE: [Ethereal-users] Tethereal output syntax different betwee

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Ronnie Sahlberg" <ronnie_sahlberg@xxxxxxxxxxxxxx>
Date: Thu, 21 Nov 2002 19:08:19 +1100
From: Alistair.McGlinchy
Sent: Thursday, November 21, 2002 6:11 AM


> I vote yes. As I currently I have to do some yucky guess work with my
> tethereal2CSV.pl script to deal with this.  Alternatively a separate
option
> for a CSV extract using a named column list would be a bonus. I imagine
> something like:
>
> tethereal -<csv flag> "Number,Relative time,Size,Protocol" > out.csv

Something reasonably similar to your request already exist in tethereal.
Well in the CVS version at least.

Add the parameter -z proto,colinfo,frame.number,frame.number
to the command line for tethereal and you will get something like
frame.number == x
in the output line for each packet.

You can use -z proto,colinfo   any number of times on the command line.

>
> Would produce a four column CSV file containing only these columns.  This
> would also save me the embarrassment of having to mung the "preferences"
> file to find out someone's fiddled the current columns setting.

Wouldnt do this, but using a bunch of -z proto,colinfo   and some sed magic
to extract whatever data you want should be reasonably easy to hack up.


See the manual page for tethereal in current CVS version of ethereal.