Wireshark-users: Re: [Wireshark-users] tshark reassembled TLSv1 record: Can it display certificat

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 18 Dec 2009 15:50:04 -0800
On Dec 18, 2009, at 3:40 PM, Guy Harris wrote:

> It might require some tag+value format, so that each field value in the output for a packet is tagged with the field name.)

Hmm.  Maybe there's some kind of extensible markup language that could be used to define that format. :-)

I.e., try "-T pdml".  Yes, PDML is a bit of a pain to parse, but....