Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

I can only export it in pcapng format.

Note that there are two different types of writing that tshark can do. The first is "writing in a capture file format", in which the raw packet contents of in the input file are written to the output file, possibly after some processing such as selecting certain packets to be written. The -w flag specifies a file to write to, and the -F flag to specify the capture file format to write (the default is pcapng).

The second is writing out, as text, the results of dissecting the packets. The text is always written to the standard output, so you can send it to a file by redirecting the standard output or can pipe it to another program. The -T flag specifies the format.