Pascal Quantin
changed
bug 10599
What |
Removed |
Added |
Summary |
Display mysql.row.text 1 line per row
|
Allow -E aggregator field print option to accept a new line character
|
Comment # 10
on bug 10599
from Pascal Quantin
As stated in tshark manpage:
-E <field print option>
Set an option controlling the printing of fields when -T fields is
selected.
Options are:
[...]
aggregator=,|/s|<character> Set the aggregator character to use for fields
that have multiple occurrences. If , a comma will be used (this is the
default), if /s, a single space will be used. Otherwise any character that can
be accepted by the command line as part of the option may be used.
So here if I understand properly, the request is to be able to use -E
aggregator=/n so as to display each occurrence of the mysql.row.text field
within a given packet on a new line, right?
But in that case, how an automated tool would make the difference between 2
text entries within the same packet, or from 2 different packets? By using the
-E quote option?
If implemented, I guess it should also be added to the -E separator option.
Note that when displaying the packet content with tshark -O mysql -r
mysql.pcap, you get several lines.
You are receiving this mail because:
- You are watching all bug changes.