On Tue, Dec 16, 2008 at 01:37:53PM +0530, Hashmat Khan wrote:
> But how do I get this kind of output:
> 117.97.37.213 255.255.255.255 DHCP 68 67
> 0x39e5 (14821)
>
> I want to print any source ip followed by any dest ip followed by
> protocol type followed by src port, dest port and finally ip header
> identification.
> tshark -e ip.src -e ip.dst -E separator=/s -T text -r my_dns.pcap
>
> but it complained:
> tshark: Output fields were specified with "-e", but "-Tfields" was not
> specified.
You need to use -Tfields instead of -Ttext
Steve