tshark with filter to CSV producing output for every packet

asked 2022-12-08 02:15:16 +0000

tdrice gravatar image

i'm using tshark to filter on dissector fields. This works BUT packets excluded by the filter still produce a line output with what seems to be the packet size. Therefore post-processing is necessary to clean up the CSV file.

Sample tshark output: 7321

8161

186

21.909215000,46.9410915740944,-119.253969718347

186

21.999966000,46.9411354379834,-119.255116969599

204

7321

8161

186

22.408871000,46.9411012325238,-119.254331354686

204

204

The lines with just the single number should be filtered out but are present in the tshark output

edit retag flag offensive close merge delete

Comments

What's your tshark version and command line used?

grahamb gravatar imagegrahamb ( 2022-12-08 09:49:49 +0000 )edit

Did you use a display filter (-Y) to output only the packets of interest?

André gravatar imageAndré ( 2022-12-09 21:40:21 +0000 )edit
add a comment