Ask Your Question

Revision history [back]

tshark export of “goose.integer” is not the same under windows as under linux

The data will be more complete in windows. What would be the best way to export the data completely under linux?

linux

tshark -r data.pcapng -Y "frame.number == 383" -e "goose.integer" -T fields > 1.txt

windows

tshark -r data.pcapng -Y "frame.number == 383" -e "goose.integer" -T fields > 2.txt

image description image description

tshark export of “goose.integer” is not the same under windows as under linux

The data will be more complete in windows. What would be the best way to export the data completely under linux?

linux

tshark -r data.pcapng -Y "frame.number == 383" -e "goose.integer" -T fields > 1.txt

windows

tshark -r data.pcapng -Y "frame.number == 383" -e "goose.integer" -T fields > 2.txt

image descriptionSnipaste_2024-04-27_20-36-58.png image descriptionSnipaste_2024-04-27_20-37-10.png

tshark export of “goose.integer” is not the same under windows as under linux

The data will be more complete in windows. What would be the best way to export the data completely under linux?

linux

tshark -r data.pcapng -Y "frame.number == 383" -e "goose.integer" -T fields > 1.txt

1.txt tshark -v TShark (Wireshark) 4.2.2 (Git v4.2.2 packaged as 4.2.2-1).

windows

tshark -r data.pcapng -Y "frame.number == 383" -e "goose.integer" -T fields > 2.txt

2.txt D:\Program Files\Wireshark>tshark -v TShark (Wireshark) 4.2.3 (v4.2.3-0-ga15d7331476c).

Snipaste_2024-04-27_20-36-58.png Snipaste_2024-04-27_20-37-10.png