Ask Your Question

Revision history [back]

tshark -r file.pcap -Y 'filter expression' -c 1 -T fields -e desired.field1 -e desired.field2