Ask Your Question

Revision history [back]

Tshark - hex and ASCII dump WITHOUTdetails (QUIC decryption off))

Hello all, My goal is to print a hex and ASCII dump of the packet data WITHOUT printing the summary and/or details. For that If I use tshark -x -r file and I get some of the following lines: Frame (XXXX bytes): Reassembled TCP (XXXX bytes): Decrypted QUIC (1315 bytes): I do not want them.

While I can force the reassembly of TCP off with option -o tcp.desegment_tcp_streams:false, I do not know the option to force decrypyion of QUIC packets off. Or is there any option that switches off summaries globally with hex and ASCII dump?

Thanks!