| Bug ID |
11401
|
| Summary |
CSV values missing when using tshark -2 option
|
| Product |
Wireshark
|
| Version |
1.12.6
|
| Hardware |
x86-64
|
| OS |
Windows 7
|
| Status |
UNCONFIRMED
|
| Severity |
Major
|
| Priority |
Low
|
| Component |
TShark
|
| Assignee |
[email protected]
|
| Reporter |
[email protected]
|
Build Information:
TShark 1.12.6 (v1.12.6-0-gee1fce6 from master-1.12)
Copyright 1998-2015 Gerald Combs <[email protected]> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Compiled (64-bit) with GLib 2.38.0, with WinPcap (4_1_3), with libz 1.2.5, with
SMI 0.4.8, with c-ares 1.9.1, with Lua 5.2, without Python, with GnuTLS 3.2.15,
with Gcrypt 1.6.2, without Kerberos, with GeoIP.
Running on 64-bit Windows 7 Service Pack 1, build 7601, without WinPcap.
Intel(R) Core(TM) i5-5300U CPU @ 2.30GHz, with 8082MB of physical memory.
Built using Microsoft Visual C++ 10.0 build 40219
--
Hi,
I have a short SQL/TDS trace and I want to output certain columns into CSV. If
I run this command:
tshark -T fields -E separator=, -E quote=d -e frame.number -e ip.addr -e
_ws.col.Info -r tds_sql_batch_first_10.pcapng
I get:
"1","10.100.20.223,10.100.20.220","1155â┼'1433 [ACK] Seq=3698378077
Ack=2551614322 Win=65535 Len=0"
"2","10.100.20.223,10.100.20.220","1154â┼'1433 [ACK] Seq=3762048005
Ack=3002787638 Win=65113 Len=0"
"3","10.100.20.223,10.100.20.220","SQL batch"
"4","10.100.20.220,10.100.20.223","Response"
If I run the same commend with the -2 option like this:
tshark -T fields -E separator=, -E quote=d -e frame.number -e ip.addr -e
_ws.col.Info -r tds_sql_batch_first_10.pcapng
I get:
"1","10.100.20.223,10.100.20.220",
"2","10.100.20.223,10.100.20.220",
"3","10.100.20.223,10.100.20.220",
"4","10.100.20.220,10.100.20.223",
So the Info column information is missing. I get a similar problem when I add a
column from a field defined by a LUA script.
Thanks and regards...Paul
You are receiving this mail because:
- You are watching all bug changes.