Ask Your Question

Revision history [back]

Using the -? option to --export-objects you can see the list of object type supported. The list (on 2.5.x at least) includes smb, imf and tftp, so simply supply the option required, e.g.

tshark -r mypcap.pcap --export-objects "smb,out_path"