Wireshark mailing list archives
Change amount of bytes per line with tshark -x
From: Remy Leone <remy.leone () inria fr>
Date: Mon, 07 Aug 2017 14:16:28 +0000
Hello,
tshark -x is very useful to get packets dumps like this one:
           000000 00 0e b6 00 00 02 00 0e b6 00 00 01 08 00 45 00
           000010 00 28 00 00 00 00 ff 01 37 d1 c0 00 02 01 c0 00
           000020 02 02 08 00 a6 2f 00 01 00 01 48 65 6c 6c 6f 20
           000030 57 6f 72 6c 64 21
           000036
I was wondering if it is possible to instruct tshark to have a complete
hexdump of a packet on a single line. For instance with "a bytes_per_line"
settings? Would this long line be successfully parsed with tools such as
text2pcap?
Best regards
Rémy
___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: https://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Change amount of bytes per line with tshark -x Remy Leone (Aug 07)
- Re: Change amount of bytes per line with tshark -x Guy Harris (Aug 07)
 
 
