Hello.

I'm trying to get TShark to parse packets containing vlan (over ethernet).
As far as I've understood - I should use the '-d' parameter for that. Hence,
I've tried to use the following parameters:
-l -T pdml -i- -d eth.type==0xffff,vlan

Using the '-l -T pdml -i-' part works fine, but adding the -d parameter
makes Tshark return no information on the packet (not even an empty xml).

Do you have any idea what might be the problem? I'm desperate for any help
that you can give me...

Other attempts that failed:
-l -T pdml -i- -d eth,vlan
-l -d vlan -T pdml -i-
-l -d eth.type=65535,vlan -T pdml -i-

Thanks in advance!
_______________________________________________
Wireshark-users mailing list
Wireshark-users@wireshark.org
http://www.wireshark.org/mailman/listinfo/wireshark-users

Reply via email to