Hi Andrew,
To filter the packets that contain data:
$ tshark -r test.pcap -R data -w testdata.pcap
To print the data from the Packet Byte Pane (Hex and ASCII)
$ tshark -r testdata.pcap -x > testdata.txt
HTH
Joan
On Tue, 4 Nov 2008 13:57:23 +0100 Andrew Cuthbertson wrote:
>Hi
>
>1. I want to export the data field as ascii from a command line. I
>use
>tshark to export fields of interest
>
>tshark.exe -r input.enc > output.txt -E separator=; -E header=y -T fields
>-e frame.number -e data.data
>
>But this gives me the hex and I would like the ascii equivalent. How can
>I
>export the format I want via command line or convert it?
>
>2. I export many fields with -T field command but it gives the raw
>values. I would like to get the decoded values. Is there any way of doing
>this? I know there are some limited values available via the -o column
>command.
>
>
>
>Andrew
>
>_______________________________________________
>Wireshark-users mailing list
>Wireshark-users@xxxxxxxxxxxxx
>https://wireshark.org/mailman/listinfo/wireshark-users