Wireshark-users: Re: [Wireshark-users] Print wireshark option from command

From: Stephen Fisher <stephentfisher@xxxxxxxxx>
Date: Tue, 16 Dec 2008 02:23:31 -0700
On Tue, Dec 16, 2008 at 12:46:09AM -0800, Guy Harris wrote:

> Is there a way to get the value of the protocol column with "-T 
> fields" and "-e"?  Everything else is a field (although he might want 
> the generic source and destination addresses if he has any non-IPv4 
> traffic), but the column values aren't necessarily registered fields.

No, there is no way to display column information with -Tfields.  Some 
have asked for the information column to be one of the columns that can 
be displayed.  There is an enhancement request in as bug #2892 for this.


Steve