tshark.exe -T json -V -r field text

asked 2019-11-14 15:09:49 +0000

ga gravatar image

updated 2019-11-14 15:13:01 +0000


Is there a way to get the fields text using the -T json option to include the value of the fields description?

example: "nas_eps.nas_msg_emm_type": "72",

example when parsing the same file using just text I get the field description. NAS EPS Mobility Management Message Type: Tracking area update request (0x48)

maybe have the value as "nas_eps.nas_msg_emm_type": "Tracking area update request (72)",

Is their an option or a way to have that with -T json option. using -T ek does provide some but it is a more ELK format.

edit retag flag offensive close merge delete


Similar to the "showname" in "-T pdml" output?

Chuckc gravatar imageChuckc ( 2019-11-14 16:41:13 +0000 )edit

Yes to have the json format include the text meaning also.

ga gravatar imagega ( 2019-11-14 17:08:41 +0000 )edit