2020-10-20 08:17:52 +0000 | marked best answer | Dump each packet data received on a different file where the file name is the tcp.time_relative what i'm trying to achieve is to sniff the traffic over the loopback and writing every packet payload on its own file where the file name is the tcp.time_relative with: I can get the two fields i need, what is crucial now is a way to write each tcp.payload to a file where tcp.time_relative is the file name. If someone knows some usefull tshark commands or a way to script this would be really nice. thank you in advance for you answers |
2020-10-20 08:17:52 +0000 | received badge | ● Scholar (source) |
2020-10-20 08:17:49 +0000 | commented answer | Dump each packet data received on a different file where the file name is the tcp.time_relative That's great, totally what i was looking for. thank you |
2020-10-19 15:34:21 +0000 | commented question | Dump each packet data received on a different file where the file name is the tcp.time_relative ye a bash script would do the trick |
2020-10-19 14:58:31 +0000 | commented question | Dump each packet data received on a different file where the file name is the tcp.time_relative no i don't i already modified the command like this: tshark -l -i lo -T fields -e tcp.time_relative -e tcp.payload |
2020-10-19 13:35:26 +0000 | edited question | Dump each packet data received on a different file where the file name is the tcp.time_relative Dump each packet data received on a different file where the file name is the tcp.time_relative what i'm trying to achie |
2020-10-19 13:35:23 +0000 | received badge | ● Editor (source) |
2020-10-19 13:35:23 +0000 | edited question | Dump each packet data received on a different file where the file name is the tcp.time_relative Dump each packet data received on a different file where the file name is the tcp.time_relative what i'm trying to achie |
2020-10-19 13:31:07 +0000 | asked a question | Dump each packet data received on a different file where the file name is the tcp.time_relative Dump each packet data received on a different file where the file name is the tcp.time_relative what i'm trying to achie |