Comment # 5
on bug 12269
from Christopher Maynard
(In reply to alex from comment #4)
> 1) headers are not displayed even with -Eheader=y option
> 2) formatting is ugly (i.e. some fields can be empty so columns are not
> aligned and output is very hard to read)
The "-E header=y" option is meant to be used with "-T fields" and when using
"-T fields", you can also specify the field separator with the "-E
separator=/t" option, although in most cases, the default <tab> character
should work fine.
This would allow you to create a tab-delimited file that could be easily
imported into something like Excel, with empty fields being properly aligned
under the correct column. For example.
tshark.exe -T fields -E header=y -E separator=/t -e frame.number -e
_ws.col.Info -r file.pcap -Y "some filter" > file.txt
Specify as many "-e <field>" options as you need.
To import the file into Excel, refer to these instructions:
https://support.office.com/en-us/article/Import-or-export-text-txt-or-csv-files-5250ac4c-663c-47ce-937b-339e391393ba
If you don't have Excel, then refer to the instructions relevant to your
application.
More details: https://www.wireshark.org/docs/man-pages/tshark.html
You are receiving this mail because:
- You are watching all bug changes.