Ask Your Question

BMWE's profile - activity

2024-04-14 06:19:57 +0000 asked a question new lua dissector error

new lua dissector error Hi, I'm trying to create a new dissector and has error no such field XXX method/fieldfor object

2023-12-11 15:04:57 +0000 received badge  Famous Question (source)
2023-07-11 15:20:56 +0000 received badge  Famous Question (source)
2023-06-08 09:29:04 +0000 commented answer tshark export data with epoch time

any option to get the time in epoch time?

2023-06-08 09:01:03 +0000 commented question tshark export data with epoch time

appended :)

2023-06-08 09:00:34 +0000 edited question tshark export data with epoch time

tshark export data with epoch time Hi, I'm trying to read file and save content to text file with epoch time. I'm execu

2023-06-08 08:41:02 +0000 asked a question tshark export data with epoch time

tshark export data with epoch time Hi, I'm trying to read file and save content to text file with epoch time. I'm execu

2023-06-08 08:38:28 +0000 received badge  Popular Question (source)
2023-05-17 17:39:30 +0000 received badge  Notable Question (source)
2023-05-17 17:39:30 +0000 received badge  Famous Question (source)
2023-04-26 12:33:37 +0000 received badge  Notable Question (source)
2023-04-12 18:06:49 +0000 received badge  Notable Question (source)
2023-04-12 18:06:49 +0000 received badge  Popular Question (source)
2023-04-03 16:42:00 +0000 received badge  Notable Question (source)
2023-04-03 16:38:29 +0000 received badge  Notable Question (source)
2022-06-06 05:41:08 +0000 received badge  Popular Question (source)
2022-05-29 07:16:51 +0000 received badge  Popular Question (source)
2022-05-29 07:16:29 +0000 received badge  Famous Question (source)
2022-04-28 23:41:39 +0000 received badge  Notable Question (source)
2022-04-24 08:00:32 +0000 received badge  Notable Question (source)
2022-02-22 02:42:24 +0000 received badge  Famous Question (source)
2022-02-22 02:42:24 +0000 received badge  Popular Question (source)
2022-02-22 02:42:24 +0000 received badge  Notable Question (source)
2022-02-14 09:11:44 +0000 received badge  Notable Question (source)
2022-02-10 00:42:52 +0000 received badge  Popular Question (source)
2021-08-07 06:29:27 +0000 asked a question export part of the packet using dumpcap

export part of the packet using dumpcap Once doing some capture with dumpcap, is it possible to export part of the data

2021-07-31 10:15:45 +0000 commented answer capture filter of GRE

Thanks, this one seems to be OK. I've appended followup question (filter UDP inside GRE)

2021-07-31 10:14:27 +0000 edited question capture filter of GRE

capture filter of GRE Hi, How can I set capture filter for the GRE? I've tried proto GRE but I receive an error unkon

2021-07-28 19:27:10 +0000 received badge  Popular Question (source)
2021-07-28 05:31:42 +0000 marked best answer capture filter of GRE

Hi,

How can I set capture filter for the GRE?

I've tried proto GRE but I receive an error unkonwn ip proto 'GRE'.

Following previous question: If I need to filter some udp packet (on port 1234) which is inside the GRE, how can I do that?

2021-07-27 14:30:11 +0000 received badge  Popular Question (source)
2021-07-27 14:29:26 +0000 received badge  Famous Question (source)
2021-07-27 14:29:26 +0000 received badge  Notable Question (source)
2021-07-27 13:09:39 +0000 asked a question capture filter of GRE

capture filter of GRE Hi, How can I set capture filter for the GRE? I've tried proto GRE but I receive an error unkon

2021-05-19 21:59:01 +0000 received badge  Popular Question (source)
2021-04-09 16:07:37 +0000 received badge  Famous Question (source)
2021-04-09 16:07:37 +0000 received badge  Notable Question (source)
2021-03-15 06:33:58 +0000 received badge  Famous Question (source)
2021-03-01 14:53:37 +0000 received badge  Popular Question (source)
2021-02-11 16:54:20 +0000 commented answer pyshark for live capture - dumpcap and tshark

P.S. see edit in the original question

2021-02-11 16:52:42 +0000 edited question pyshark for live capture - dumpcap and tshark

pyshark for live capture - dumpcap and tshark Hello, When using tshark it creates temporary files. When it is used for

2021-02-11 16:52:16 +0000 edited question pyshark for live capture - dumpcap and tshark

pyshark for live capture - dumpcap and tshark Hello, When using tshark it creates temporary files. When it is used for

2021-02-11 06:39:21 +0000 commented answer tshark strange behavior with capture filter

@SYN-bit, @cmaynard, Thanks for the explanation. I've though that even if GRE is used, tshark should be able to identif

2021-02-11 06:13:33 +0000 commented answer pyshark for live capture - dumpcap and tshark

The -b is in order to limit the size of files that are going to be generated (my program shall tun for long time)

2021-02-10 20:10:35 +0000 commented answer pyshark for live capture - dumpcap and tshark

Mr. @Chuckc, your last comment is not answering the issue. The example you have provided is working as there is no -b fl

2021-02-10 18:50:51 +0000 commented answer pyshark for live capture - dumpcap and tshark

So if I have some custom dissector with 6 types of messages, how can I filter specific message? Lets say the protocol na

2021-02-10 17:52:45 +0000 commented answer pyshark for live capture - dumpcap and tshark

OK, so according to my understanding, I shall change the code so that the capture filter (or display filter) would be on

2021-02-10 09:16:00 +0000 commented question pyshark for live capture - dumpcap and tshark

For example tshark -l -n -T pdml -Y udp.port==30000 -r - -b filesize:1024 -b files:1 -w test.pcap -P

2021-02-10 09:15:38 +0000 commented question pyshark for live capture - dumpcap and tshark

tshark -l -n -T pdml -Y udp.port==30000 -r - -b filesize:1024 -b files:1 -w test.pcap -P