This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Resolution name in already capture file

0

hi all

I have a pcap file about 9000 file , not resolution name

I want convert to csv format and I want a filed of ip.dst like this 'www.google.com'

who have any idea to convent file with resolution name

this my script tshark -r c:svr.pcap -T fields -e frame.number -e frame.time -e eth.src -e eth.dst -e ip.src -e ip.dst -e ip.proto -e frame.len -e data.len -e tcp.srcport -e tcp.dstport -e http.user_aget -E header=y -E separator=, -E quote=d -E occurrence=f > c:test.csv

asked 01 Feb '12, 21:53

Jakkapun%20Kanyasing's gravatar image

Jakkapun Kan...
1111
accept rate: 0%