| Bug ID |
10573
|
| Summary |
Allow to add custom fields based on filters expressions
|
| Product |
Wireshark
|
| Version |
unspecified
|
| Hardware |
x86
|
| OS |
All
|
| Status |
UNCONFIRMED
|
| Severity |
Enhancement
|
| Priority |
Low
|
| Component |
TShark
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Build Information:
$ tshark -v
TShark 1.12.1 (Git Rev Unknown from unknown)
Copyright 1998-2014 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GLib 2.40.0, with libpcap, with libz 1.2.8, with POSIX
capabilities (Linux), with libnl 3, with SMI 0.4.8, with c-ares 1.10.0, with
Lua
5.2, without Python, with GnuTLS 3.3.7, with Gcrypt 1.6.2, with MIT Kerberos,
with GeoIP.
Running on Linux 3.16-2-amd64, with locale es_ES.UTF-8, with libpcap version
1.6.2, with libz 1.2.8.
Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz
Built using gcc 4.9.1.
--
Hello,
I would like to distinguish frames from the tshark output, see this failed
attemp :
tshark -r mydump-20141015-185000.dump -Y "frame contains a or frame contains
b" -T fields -e frame.time -e "frame contains a" -e "frame contains b"
I would like next output:
time1 0 1 # not comtains a and contains b
time2 1 1 # contains a and contains b
time3 1 0 # contains a and not contains b
Thank you very much !
PD: From
https://ask.wireshark.org/questions/37082/tshark-using-filter-_expression_-as-field
I was asked to open a new enhancemment bug.
You are receiving this mail because:
- You are watching all bug changes.