Revision history [back]

You can try using the "frame.protocols" pseudo field, e.g.

tshark -r mycapture.pcap -T fields -e frame.protocols