On Mar 20, 2008, at 11:59 AM, DFE (Donald Ernst) wrote: > I am trying to use WireShark to measure the response time of my > server for certain applications and need to use it without its GUI. > Right now, I execute "Tshark -a duration:120 -i 2 >> test.txt" to > collect the data. This gives me a nice readable text file I can > process with my own program. However, this method does not give me > the application data, just summary information for each packet. Is > there any way to get the actual application data using the Tshark > command?
What do you mean by "the actual application data"? If you use the "- V" flag, TShark will give a full dissection of the packet (the equivalent of what would appear in the packet detail pain for Wireshark). _______________________________________________ Wireshark-users mailing list Wireshark-users@wireshark.org http://www.wireshark.org/mailman/listinfo/wireshark-users