Ask Your Question

godbless2you's profile - activity

2020-07-19 10:15:45 +0000 received badge  Popular Question (source)
2019-02-17 08:54:33 +0000 edited question How to analyse and debug tshark source code

How to analyse and debug tshark source code I'm not sure whether it is appropriate to ask questions about source code de

2019-02-17 08:53:32 +0000 asked a question How to analyse and debug tshark source code

How to analyse and debug tshark source code I'm not sure whether it is appropriate to ask questions about source code de

2019-02-15 00:25:53 +0000 marked best answer how to use tshark to divide a packet into several records?

I have encountered a problem where I used tshark to extract a packet like that:

Internet Protocol Version 4, Src: 192.168.0.33, Dst: 192.168.0.15
Transmission Control Protocol, Src Port: 179, Dst Port: 2124, Seq: 49, Ack: 265
Border Gateway Protocol - UPDATE Message
    ...
    Path attributes
        ...
        Path Attribute - AS_PATH: 1 2
        ...
Border Gateway Protocol - UPDATE Message
    ...
    Path attributes
        ...
        Path Attribute - AS_PATH: 1 3
        ...
Border Gateway Protocol - UPDATE Message
    ...
    Path attributes
        ...
        Path Attribute = AS_PATH: 2 4
        ...

when I use a command like tshark -r a.cap -e bgp.update.path_attribute.as_path_segment.as4 ..., I get a result like "1 2 1 3 2 4", which is not what I want. I am confused how to use tshark so that I can get results like "1 2","1 3","2 4" as three records?

2019-02-15 00:25:53 +0000 received badge  Scholar (source)
2019-02-15 00:25:07 +0000 edited question how to use tshark to divide a packet into several records?

how to use tshark to divide a packet into several records? I have encountered a problem where I used tshark to extract a

2019-02-15 00:22:34 +0000 edited question how to use tshark to divide a packet into several records?

how to use tshark to divide a packet into several records? I have encountered a problem where I used tshark to extract a

2019-02-15 00:21:23 +0000 edited question how to use tshark to divide a packet into several records?

how to use tshark to divide a packet into several records? I have encountered a problem where I used tshark to extract a

2019-02-15 00:20:40 +0000 commented answer how to use tshark to divide a packet into several records?

Much thanks for your quick reply. I read the Wireshark developer's guide v2.9.1 and found that it did work that way yo

2019-02-15 00:20:11 +0000 commented answer how to use tshark to divide a packet into several records?

Much thanks for your quick reply. I read the Wireshark developer's guide v2.9.1 last night and found that it did work

2019-02-14 11:50:29 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 11:49:34 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 11:47:29 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 11:47:21 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 11:46:49 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 11:46:42 +0000 edited question how to use tshark to divide a packet into several records?

how to use tshark to divide a packet into several records? I have encountered a problem where I used tshark to extract a

2019-02-14 11:46:28 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 07:58:30 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 07:58:12 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 07:57:05 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 07:56:46 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 07:56:16 +0000 edited question how to use tshark to divide a packet into several records?

how to use tshark to divide a packet into several records? I have encountered a problem where I used tshark to extract a

2019-02-14 07:55:54 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 07:54:17 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 07:46:07 +0000 edited question how to use tshark to divide a packet into several records?

how to use tshark to divide a packet into several records? I have encountered a problem where I used tshark to extract a

2019-02-14 07:44:29 +0000 commented question how to use tshark to divide a packet into several records?

The parameter "-E quote" is used to defined the character used to surround fields, which means that when you use command

2019-02-14 02:13:08 +0000 commented question how to use tshark to divide a packet into several records?

Thanks a lot for your reply. I use parameter -T and don't use parameter "-E", but according to the user guide by default

2019-02-14 01:12:49 +0000 edited question how to use tshark to divide a packet into several records?

how to use tshark to divide a packet into several records? I have encountered a problem where I used tshark to extract a

2019-02-13 13:00:09 +0000 received badge  Editor (source)
2019-02-13 13:00:09 +0000 edited question how to use tshark to divide a packet into several records?

how to use tshark to divide a packet into several records? I have encountered a problem where I used tshark to extract a

2019-02-13 12:59:08 +0000 asked a question how to use tshark to divide a packet into several records?

how to use tshark to divide a packet into several records? I have encountered a problem where I used tshark to extract a