So I am still struggling.
I tried the following command: tethereal -r testd -z proto,colinfo,tcp,tcp >
test.txt
and am getting the results as per attached txt file.
The -r is to define the source filename, the -z proto, colinfo and the
tcp,tcp is suposed to allow me to add column info. The > test.txt I added
just to pipe the output from standard out to a text file.
Can someone show me please how the "filter" and "field" part of the command
are supposed to be used and what they to achieve.
Lastly, what I really want to achieve is have an output similar to the txt
file attached but lets say add the byte size of each frame as a new column
in the file.
Is this possible? How?
Thanks
Dirk Loosen
IT Ecology
dirk@xxxxxxxxxxxxxxx
Tel: (011) 391 3330
Cell: 082 575 4931
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx]On Behalf Of Dirk
Sent: 24 July 2004 10:30 AM
To: 'Ethereal user support'
Cc: ronnie_sahlberg@xxxxxxxxxxxxxx
Subject: RE: [Ethereal-users] Can Ethereal export in CSV format
Hi,
I tried teathereal but don't understand the command line.
Can someone give me an example command to parse out just some of the fields,
lets say source and destination addresses. I tried it and am battling with
the field and filter arguments, what do they mean?
Regards
Dirk Loosen
IT Ecology
dirk@xxxxxxxxxxxxxxx
Tel: (011) 391 3330
Cell: 082 575 4931
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx
[mailto:ethereal-users-bounces@xxxxxxxxxxxx]On Behalf Of Ronnie Sahlberg
Sent: 20 July 2004 02:50 PM
To: Ethereal user support; 'Guy Harris'
Cc: ethereal-users@xxxxxxxxxxxx
Subject: Re: [Ethereal-users] Can Ethereal export in CSV format
Already possible using tethereal + cygwin
use tethereal and -z proto,colinfo,... an place whatever fields you want on
the summary line, then feed through
a grep/sed pipeline to CSVify the data.
----- Original Message -----
From: "Dirk"
Sent: Sunday, June 20, 2004 9:09 PM
Subject: RE: [Ethereal-users] Can Ethereal export in CSV format
> Hi,
> This is how Sniffer does the export, and that would suffice.
>
> "Flags","Frame","Delta Time","Size","Destination","Source", "Protocol",
> "Summary"
> "M", 3284, 0.000 , 446,"Server","Client","TCP","D=1521 S=2130 ACK=...."
> " ", 3285, 0.002 , 94,"Client","Server","TCP","D=2130 S=1521 ACK=...."
> " ", 3286, 0.000 , 89,"Server","Client","TCP","D=1521 S=2130 ACK=...."
> " ", 3287, 0.010 , 605,"Client","Server","TCP","D=2130 S=1521 ACK=...."
> " ", 3288, 0.002 , 299,"Server","Client","TCP","D=1521 S=2130 ACK=...."
> " ", 3289, 0.001 , 91,"Client","Server","TCP","D=2130 S=1521 ACK=...."
> " ", 3290, 0.000 , 82,"Server","Client","TCP","D=1521 S=2130 ACK=...."
> " ", 3291, 0.003 , 155,"Client","Server","TCP","D=2130 S=1521 ACK=...."
> " ", 3292, 0.001 , 75,"Server","Client","TCP","D=1521 S=2130 ACK=...."
> " ", 3293, 0.001 , 73,"Client","Server","TCP","D=2130 S=1521 ACK=...."
> " ", 3294, 0.002 , 446,"Server","Client","TCP","D=1521 S=2130 ACK=...."
>
> Better still would be the addition of a few more columns to break out the
> summary field and have Sequence numbers and Ack numbers as well as source
> and destination ports in seperate columns.
>
> Regards
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users