tshark can be used to display fields using the -T option. If the same field occurs a number of times within a protocol, only one value ( the last ) gets displayed.
As far as I can see the error looks like it comes from the routine proto_tree_write_fields. The -T pdml option gives the correct output, but is too voluminous. Can anyone help with a fix? Peter ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <[email protected]> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:[email protected]?subject=unsubscribe
