Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

You could parse it out of frame.protocols or specify a list of fields with -e options including _ws.col.Protocol.
If you search for _ws.col.Protocol here on the Q&A site there are examples using _ws.col.Protocol.
tshark man page

You could parse it out of frame.protocols or specify a list of fields with -e options including _ws.col.Protocol.
If you search for _ws.col.Protocol here on the Q&A site there are examples using _ws.col.Protocol. examples.
tshark man page