Revision history [back]

write the name of fields instead of number in tshark

hi, i want to write the name of fields instead of number in tshark.is it possible? for example if i use this command: tshark -r test.pcap -T fields -e eth.type

in the output i see Type:0x8021 but i want to see the name of this field .i want to see Type: PPP IP Control Protocol (0x8021)

write the name of fields instead of number in tshark

hi, i want to write the name of fields instead of number in tshark.is it possible? for example if i use this ~~command:~~ command:

tshark -r test.pcap -T fields -e eth.type eth.type

in the output i see

Type:0x8021

but i want to see the name of this field .i want to see

Type: PPP IP Control Protocol (0x8021)(0x8021)