Wireshark-users: Re: [Wireshark-users] How to display identical fields with tshark

From: eymanm <eymanm@xxxxxxxxx>
Date: Thu, 6 Jan 2011 14:59:46 -0500
Martin,

Can you elaborate a bit on the PDML approach. Is there a mechanism within WireShark to deal with the PDML? Or the XSLT is the way to go? Can you point to any documentation?

Thanks

On Wed, Jan 5, 2011 at 6:11 PM, Martin Visser <martinvisser99@xxxxxxxxx> wrote:
Also as an interim measure, you may want to make use of the PDML
output instead (which will show all fields). This will require
separate parsing of course to be useful.

Regards, Martin

MartinVisser99@xxxxxxxxx