tshark - get real time data for long run
I have same issue as mentioned:
I'd like to use tshark (on win 7 machine) for long time running (not 24x7, but couple of hours) for extracting some data from my custom lua dissector. The computer where it is executed is a port monitor (i.e. there is a lot of non relevant traffic).
I'm using the filter options with -T fields and -e for attributes to send data to stdout (python will trigger start of the capture, get the tshark extracted fields and parse it for further process).
What is the best solution I have?
Is there some better solution to extract and import data to python?