 | 1 | initial version |
You can try specifying the column output instead of the per-field output. For example:
*nix:
tshark -r test.pcap -o 'gui.column.format:"Eth Type","%Cus:eth.type"'
Windows:
tshark -r test.pcap -o "gui.column.format:\"Eth Type\",\"%Cus:eth.type\""
Run tshark -G column-formats and/or refer to the tshark man page for additional help with specifying column formats.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.