Wireshark-bugs: [Wireshark-bugs] [Bug 8529] tshark does not decode field icmp.resp_in while Wire

Date: Wed, 27 Mar 2013 17:41:12 +0000

Comment # 5 on bug 8529 from
(In reply to comment #2)
The "-2" option should work when reading from a file, i.e.:
> tshark -r bug_icmp_resp_in.pcapng -T fields -e "icmp.resp_in" -2

OK, I retried and yes, "-2" works if only printing out fields, like in
C:\Temp>tshark -2 -r bug_icmp_resp_in.pcapng -T fields -e "icmp.resp_in"
Output:
2

4

6


9

The "-2" option does not work if using with a filter, like in 
C:\Temp>tshark -2 -r bug_icmp_resp_in.pcapng -R "icmp.resp_in"
Output is empty.


You are receiving this mail because:
  • You are watching all bug changes.