[prev in list] [next in list] [prev in thread] [next in thread]
List: wireshark-users
Subject: Re: [Wireshark-users] tshark display filter / info
From: Stephen Fisher <steve () stephen-fisher ! com>
Date: 2011-10-31 18:03:00
Message-ID: 20111031180300.GC77003 () shadow ! stephen-fisher ! com
[Download RAW message or body]
On Sun, Oct 30, 2011 at 10:38:41AM -0700, Stuart Kendrick wrote:
> How do I persuade tshark to display what Wireshark calls the 'Info' or
> 'Information' column?
You can temporarily change the preferences for columns to display using
the -o option. To display only the info column, try this (the first is
the title of the column, which tshark doesn't display and the second
value is the code to use [see below]):
tshark -o column.format:"Info","%i"
The syntax is taken from the preferences file (on Unix,
~/.wireshark/preferences and on Windows, check the Folders tab in
Help->About and look for global configuration) and you can find all of
the % codes for columns from epan/column.c in the source code
(http://anonsvn.wireshark.org/viewvc/trunk/epan/column.c?revision=37898&view=markup)
___________________________________________________________________________
Sent via: Wireshark-users mailing list <wireshark-users@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
mailto:wireshark-users-request@wireshark.org?subject=unsubscribe
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic