 | 1 | initial version |
If I read your use-case correctly, you would like to get one line per packet with the TCP data from the packet in hex format. I think the following tshark command would suit your need:
tshark -r <file> -T fields -e frame.number -e ip.src -e ip.dst -e tcp.payload
(you can of course change the fields of interest, but the field tcp.payload will print a hexdump of the TCP segment data)
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.