tshark is the command line version of wireshark; a free and open-source packet analyzer.
Questions tagged [tshark]
501 questions
-2
votes
2 answers
'c:\Program' is not recognized as an internal or external command, operable program or batch file
I am trying to execute commands in python, but it is not working. The command syntax work fine in command prompt but not in python.
The code I used is import os os.system('"c:\\Program Files\\Wireshark\\tshark.exe" -i Ethernet -i Wi-Fi -w…

Etsub Kassa
- 11
- 3
-2
votes
1 answer
Tshark - Some fields aren't valid
I'm trying to generate a json file from a .pcap witth only a few fields. The first thing I'm doing is exporting the whole .pcap as a json file to see the fields I want to extract (File - Export Packet Dissections - As json). Then I execute tshark…

Luka
- 115
- 7
-2
votes
1 answer
How to parse tshark arguments in ShellExecute function
I want to call tshark.exe from a c++ script via ShellExecute. Is there any way to parse cmd arguments to the application?
e.g. specify output file like this
tshark -w output.pcap
Here is the code
#include
#include
int…

waifu_anton
- 53
- 2
- 7
-2
votes
1 answer
Using Tshark commands How to produce "DHCP option 82" output in a user readable form (ASCII))
I have DHCP option 82 value in pcap file ->click here
I am using the below tshark commmand to fetch option 82 value->click here
I want the option 82 output to be printed in ASCII format instead of binary and hexadecimal format.

supriya swain
- 1
- 1
-2
votes
1 answer
Tshark custom grep
So my command is:
tshark -Y 'wlan.fc.type_subtype==0x04'
So my output is:
21401 205.735966 Apple_90:ea:8e -> Broadcast 802.11 155 Probe Request, SN=3667, FN=0, Flags=........C, SSID=Broadcast
How can I get Apple_90:ea:8e + SSID=Broadcast and…

Nitescu Lucian
- 255
- 4
- 18
-2
votes
2 answers
How to capture live traffic on a remote Linux server and how to view it in Wireshark on the local Windows machine?
This is related to this question: How to Capture Remote System network traffic?
I would like to be able to export live traffic captured on a Linux server and to view that in real time on my Windows machine.
Please do not suggest SPAN or RSPAN…

MiniMe
- 1,057
- 4
- 22
- 47