Ask Your Question
0

How to enable all protocols in tshark?

asked 2019-04-17 09:08:44 +0000

Eric gravatar image

updated 2019-04-17 09:11:35 +0000

My application use tshark but it cannot decode any packet, and I found the root cause is user disabled all protocols in Wireshark -> Analyze -> Enabled Protocols, If I enable all protocols in that dialog, tshark works fine, Is there any option to enable all protocol when calling tshark, like "--enable-protocol=all" ? even if user disabled all protocol in Wireshark, any advice and suggestions will be appreciated

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted
0

answered 2019-04-17 11:01:50 +0000

Jasper gravatar image

You should create a new profile in Wireshark with all protocols enabled. The user can then switch back to his previous profile, and you run tshark with the "-C profilename" option to use the all-protocols-enabled profile

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2019-04-17 09:08:44 +0000

Seen: 1,202 times

Last updated: Apr 17 '19