tshark.exe -T json -V -r field text
Hi,
Is there a way to get the fields text using the -T json option to include the value of the fields description?
example: "nas_eps.nas_msg_emm_type": "72",
example when parsing the same file using just text I get the field description. NAS EPS Mobility Management Message Type: Tracking area update request (0x48)
maybe have the value as "nas_eps.nas_msg_emm_type": "Tracking area update request (72)",
Is their an option or a way to have that with -T json option. using -T ek does provide some but it is a more ELK format.
Similar to the "showname" in "-T pdml" output?
Yes to have the json format include the text meaning also.