Export object in tshark
hi. how can i export SMB,TFTP, IMF, objects in tshark? for example if we use the below command, we can export http:
tshark -r mypcap.pcap --export-object "http,out_path"
add a comment
Using the -? option to --export-objects you can see the list of object type supported. The list (on 2.5.x at least) includes smb, imf and tftp, so simply supply the option required, e.g.
tshark -r mypcap.pcap --export-objects "smb,out_path"
Asked: 2018-03-26 16:50:24 +0000
Seen: 4,870 times
Last updated: Mar 26 '18