how can i write in different files without the -w option ?

polo
1

Hi, i have to write into different files (1/hour) and i can't use -w because i don't want raw data.

an exemple :

tshark -Y ... -b files:24 -b interval:3600 -i Ethernet -T json -t u -e frame.time -e a -e b -e ip.src >> text.json

is it possible, and how ?

1 Answer

Sort by » oldest newest most voted

Chuckc
3023 ●6 ●608 ●20

Split into two tasks:
Use dumpcap to create the capture files
Have a second script that watches for new files then processes it with tshark

Please start posting anonymously - your entry will be published after you log in or create a new account.

1 follower

Asked: 2023-01-04 09:49:01 +0000

Seen: 90 times

Last updated: Jan 04 '23