Ask Your Question

Export object in tshark

asked 2018-03-26 16:50:24 +0000

ghader gravatar image

hi. how can i export SMB,TFTP, IMF, objects in tshark? for example if we use the below command, we can export http:

tshark -r mypcap.pcap --export-object "http,out_path"

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2018-03-26 17:14:02 +0000

grahamb gravatar image

Using the -? option to --export-objects you can see the list of object type supported. The list (on 2.5.x at least) includes smb, imf and tftp, so simply supply the option required, e.g.

tshark -r mypcap.pcap --export-objects "smb,out_path"
edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2018-03-26 16:50:24 +0000

Seen: 3,730 times

Last updated: Mar 26 '18