Ask Your Question

Unknown protocol -- "pn_rt"

asked 2021-04-15 06:56:04 +0000

zmmmm gravatar image

updated 2021-04-15 08:06:34 +0000

grahamb gravatar image

i am in linux environment ,when i run command below

[test@pekphispre03021 test]$ tshark -r test.pcapng -d ethertype==0x8892,pn_rt -T fields -e _ws.col.Source -e _ws.col.Destination -e _ws.col.Protocol -E header=n -E separator=, -E occurrence=f

tshark: Unknown protocol -- "pn_rt"

tshark: Valid protocols for layer type "ethertype" are:

how to resolve this problem?

edit retag flag offensive close merge delete


tshark version info?

grahamb gravatar imagegrahamb ( 2021-04-15 08:06:11 +0000 )edit

version 3.4.3

zmmmm gravatar imagezmmmm ( 2021-04-15 08:22:37 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted

answered 2021-04-15 09:17:09 +0000

grahamb gravatar image

Works for me. Profinet is provided by a plugin dissector, I suspect the tshark instance you're running somehow doesn't have that plugin available.

What does the following command show:

tshark -G plugins
edit flag offensive delete link more


thank you ,i find the plugins directory has no permission,then i modify it ,done.

zmmmm gravatar imagezmmmm ( 2021-04-15 09:54:56 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2021-04-15 06:56:04 +0000

Seen: 323 times

Last updated: Apr 15 '21