plaintext output from pcap in tshark (with options from wireshark?)

Question

I'm trying to run a script which will allow me to export all my pcap files into plaintext versions like with wireshark.

My issue is that I need to have packet summary line, packet details expanded, packet bytes, and each packet on new page under the packet format options. I believe packet summary line is on by default, packet details are "as displayed" using -V flag.

This is the man page I've been using.

I have used the command:

tshark -V -r "$file" >> TEXT_out.txt;

Any assistance would be appreciated.

user862787 · Accepted Answer · 2013-08-07 22:53:00Z

1

I need to have packet summary line, packet details expanded, packet bytes

tshark -PVx -r "$file" >>TEXT_out.txt, at least with newer versions of TShark.

and each packet on new page

Not supported in TShark, unfortunately.

answered Aug 7, 2013 at 22:53

user862787

Sign up to request clarification or add additional context in comments.

1 Comment

jhilmer Over a year ago

To add a form feed for each packet you could do: tshark -PVx -r "$FILE" | perl -pane 's/^(Frame \d+)/^L\1/' >> TEXT_out.txt

Collectives™ on Stack Overflow

plaintext output from pcap in tshark (with options from wireshark?)

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related