Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

tshark - get real time data for long run

Returning to 2013,

I have same issue as mentioned:

I'd like to use tshark (on win 7 machine) for long time running (not 24x7, but couple of hours) for extracting some data from my custom lua dissector. The computer where it is executed is a port monitor (i.e. there is a lot of non relevant traffic).

I'm using the filter options with -T fields and -e for attributes to send data to stdout (python will trigger start of the capture, get the tshark extracted fields and parse it for further process).

What is the best solution I have?

Is there some better solution to extract and import data to python?