Quicktip: TShark's Options -e and -T
When you use TShark's option -e to display a field value, you need to include option -Tfields.
You don't actually have to memorize this, TShark will help you when you use option -e without option -T:
And by doing so, you learn about other output formats, like JSON:
Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com
×
Diary Archives
Comments