On Wed, Jan 09, 2008 at 11:45:33PM +0100, Marc Luethi wrote: > tshark -r file.pcap -T fields -e data > > This yields to output in hex, which I could cope with, but it lacks > the timestamp.
You could add -e frame.time to get the frame's arrival time also. Steve _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users
