[prev in list] [next in list] [prev in thread] [next in thread] 

List:       wireshark-dev
Subject:    Re: [Wireshark-dev] Tshark XML conversion
From:       Sake Blok <sake () euronet ! nl>
Date:       2009-07-22 21:23:33
Message-ID: 20090722212333.GA17750 () netcc ! xs4all ! nl
[Download RAW message or body]

On Wed, Jul 22, 2009 at 03:03:49PM +0200, Wasim Bari wrote:
> 
>    I just converted 1.5 Gbyte file to XML and it took about 13 minutes. And
>    the size of output xml file was 72 Gbyte which is very strange for me. Am
>    I doing something wrong or is it normal behaviour ?

Yes it is. Well, at least the increase in filesize is. Imagine the ip
source address. It takes up 4 bytes in the actual packet, but in text it
is already 7-15 bytes long (1.1.1.1 and 111.111.111.111). Add to that
the XML tags and you can imagine that the file blows up quite quickly...


>    Secondly can  get output in text mode with full details ?  (I saw text
>    option but it only gives me summary)

Try 'tshark -V'

('tshark -h' and 'man tshark' are your friends :-))


Cheers,


Sake

___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe
[prev in list] [next in list] [prev in thread] [next in thread]