Re: [Wireshark-users] Wireshark-users_Digest,_Vol_22,_Issue_75

2008-03-27 Thread Stephen Fisher
On Fri, Mar 28, 2008 at 11:24:09AM +0800, 赵新元 wrote: > #tshark -i 3 -o column.format:'"Info", "%i"' > > I use this command ,but it cann't work! The ' marks only work on Unix. I just tried on Windows using a " instead of ' and it works: tshark -o column.format:""Info", "%i"" Steve ___

Re: [Wireshark-users] Learning to setup WS to see TCP and HTTP

2008-03-27 Thread Guy Harris
On Mar 26, 2008, at 7:57 PM, Rudyard Wallen wrote: > OK, some of that went over my head but I think I got the gist. So I > guess the big question is: Is there a way to see HTTP on this network > combo of wired and wireless machines that all are connected to this > one > router? Yes - run Wires

Re: [Wireshark-users] Howto: set some column to print?

2008-03-27 Thread Rob MacKenzie
#tshark -i 3 -o column.format:'"Info", "%i"' That will just print the info column from Wireshark. You can not specify the info column from the �Ce option in tshark. -Rob MacKenzie From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ??? Sent: M

Re: [Wireshark-users] Using tshark to extract empty fields from pcap files

2008-03-27 Thread Mark Sass
I am not officially on the list, so I am not so sure where to go to reply to this reply. I am basically trying to capture the payload of smtp packets i.e. the mail message, and I am trying to capture the DNS responses where it shows the domain name and IP address to which it resolved. I am loo

[Wireshark-users] H1 Protocol Decode

2008-03-27 Thread Kevin R. DeYoung
I'm looking for information from anyone who has been able to successfully use the H1 Dissector that comes with WireShark. I am viewing transmissions between devices that are supposed to be using the Siemens H1 protocol riding on the COTP transport. COTP is decoded well but the H1 dissector doesn'

[Wireshark-users] Howto: set some column to print?

2008-03-27 Thread 赵新元
Hi, Jaap, Thank you very much! Can you tell me how to set some column to print? http://www.wireshark.org/docs/man-pages/tshark.html #TShark -i 3 -e tcp.port -T fields //It can print port #TShark -i 3 -e frame.number//It can print frame number Now I want to print info column(In wires