Export object in tshark

asked 2018-03-26 16:50:24 +0000

ghader
63 ●12 ●19 ●26

hi. how can i export SMB,TFTP, IMF, objects in tshark? for example if we use the below command, we can export http:

tshark -r mypcap.pcap --export-object "http,out_path"

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2018-03-26 17:14:02 +0000

grahamb

flag of United Kingdom of Great Britain and Northern Ireland

23790 ●4 ●950 ●227 https://www.wireshark.org

Using the -? option to --export-objects you can see the list of object type supported. The list (on 2.5.x at least) includes smb, imf and tftp, so simply supply the option required, e.g.

tshark -r mypcap.pcap --export-objects "smb,out_path"

edit flag offensive delete link

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-03-26 16:50:24 +0000

Seen: 4,249 times

Last updated: Mar 26 '18

Export object in tshark edit

1 Answer