Ask Your Question

Revision history [back]

If the fields already exist, then can you do something like this?

tshark -T fields -e ip.hdr_len -e tcp.hdr_len -e ipv6.hopopts

If that doesn't work and you're comfortable with LUA dissectors, you could use a post-dissector to grab the info you need.