take a look to tshark's -z proto,colinfo feature in the manpage http://www.wireshark.org/docs/man-pages/tshark.html
On 5/29/07, Douglas F. Calvert <[EMAIL PROTECTED]> wrote: > Hello is there a way to have tshark print a specific field instead of > the terse/verbose decoded output? I would like to be able to do: > > tshark -r file --dfc-grovel-flag wlan.bssid > > And have tshark print out the bssid either next to the source/address > or instead of the src/address? > > -- > --dfc > [EMAIL PROTECTED] > _______________________________________________ > Wireshark-users mailing list > Wireshark-users@wireshark.org > http://www.wireshark.org/mailman/listinfo/wireshark-users > -- This information is top security. When you have read it, destroy yourself. -- Marshall McLuhan _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
