Re: [Wireshark-users] tshark --print-a-specific-field ?

2007-05-30 Thread Douglas Pratley
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Guy Harris Sent: 29 May 2007 20:03 To: Community support list for Wireshark Subject: Re: [Wireshark-users] tshark --print-a-specific-field ? Stephen Fisher wrote: Check out the new -Tfields and -e options in the latest Wireshark developer

[Wireshark-users] tshark --print-a-specific-field ?

2007-05-29 Thread Douglas F. Calvert
Hello is there a way to have tshark print a specific field instead of the terse/verbose decoded output? I would like to be able to do: tshark -r file --dfc-grovel-flag wlan.bssid And have tshark print out the bssid either next to the source/address or instead of the src/address? -- --dfc

Re: [Wireshark-users] tshark --print-a-specific-field ?

2007-05-29 Thread Luis Ontanon
take a look to tshark's -z proto,colinfo feature in the manpage http://www.wireshark.org/docs/man-pages/tshark.html On 5/29/07, Douglas F. Calvert [EMAIL PROTECTED] wrote: Hello is there a way to have tshark print a specific field instead of the terse/verbose decoded output? I would like to be

Re: [Wireshark-users] tshark --print-a-specific-field ?

2007-05-29 Thread Stephen Fisher
On Tue, May 29, 2007 at 05:50:47AM -0400, Douglas F. Calvert wrote: Hello is there a way to have tshark print a specific field instead of the terse/verbose decoded output? I would like to be able to do: tshark -r file --dfc-grovel-flag wlan.bssid And have tshark print out the bssid