How to convert .pcap to text format for twamp without using tshark
If there is a way to display in key value pair , it's better. Tshark commands are of no use for twamp protocol. Tshark needs information about the way to decode for twamp protocol
Are you asking for a dissector for twamp protocol, or are there issues with twamp dissection?
Assuming twamp refers to Two-Way Active Measurement Protocol, then a dissector has been built in to Wireshark since version 2.6, so make sure you're using that version, or newer.
If your issue is with dissection of twamp can you share a capture file that illustrates the issue?
Yes twamp is exactly that. In the capture file, need to verify dscp value (that's why want in a key value pair display) . In the text format that I have got using tshark , doesn't parse such information.
So can you share a capture file so that we can help you get the tshark output you want, probably using
-T fields -e xxx
?dscp doesn't seem to be a twamp field, so are you referring to the IP DSCP field?
Text from capture:
this is the captured file. have to verify Type-P Descriptor: 0x2e000000. So is there a command to display in key value pair on CLI this .pcap file