Wireshark mailing list archives
Re: display text representation of ldap.filter in tshark
From: Alexander 'Leo' Bergolth <leo () strike wu ac at>
Date: Thu, 14 Oct 2010 20:52:37 +0200
On 10/14/2010 07:43 PM, j.snelders wrote:
You can find an overview of all the available field names in the Display Filter Reference: http://www.wireshark.org/docs/dfref/l/ldap.html You can also use ldap.filter as a display filter, use the option -V to add the output of the packet tree (Packet Details) and send the output to a text file: $ tshark -r ldap.pcap -R ldap.filter -V > ldap.txt
Yes. -V shows the search filter but I was looking for a way to print the text representation of the filter with a user defined one-line output format (-T fields). Unfortunately it doesn't look like this is possible. :-( Cheers, --leo
On Thu, 14 Oct 2010 15:47:43 +0200 Alexander 'Leo' Bergolth wrote:Hi! Is there a way to display the text representation of an ldap search-filter using tshark? I tried -e ldap.filter but this is only a 32 bit filter element (only the first filter element). Is there another display filter or a function that displays a human readable version of the whole search-filter? Cheers, --leo -- e-mail ::: Leo.Bergolth (at) wu.ac.at fax ::: +43-1-31336-906050 location ::: IT-Services | Vienna University of Economics | Austria___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
-- e-mail ::: Leo.Bergolth (at) wu.ac.at fax ::: +43-1-31336-906050 location ::: IT-Services | Vienna University of Economics | Austria ___________________________________________________________________________ Sent via: Wireshark-users mailing list <wireshark-users () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:wireshark-users-request () wireshark org?subject=unsubscribe
Current thread:
- display text representation of ldap.filter in tshark Alexander 'Leo' Bergolth (Oct 14)
- Re: display text representation of ldap.filter in tshark j.snelders (Oct 14)
- Re: display text representation of ldap.filter in tshark Alexander 'Leo' Bergolth (Oct 14)
- Re: display text representation of ldap.filter in tshark Stephen Fisher (Oct 17)
- Re: display text representation of ldap.filter in tshark Alexander 'Leo' Bergolth (Oct 18)
- Re: display text representation of ldap.filter in tshark j.snelders (Oct 14)