Wireshark mailing list archives

Re: display text representation of ldap.filter in tshark


From: Alexander 'Leo' Bergolth <leo () strike wu ac at>
Date: Thu, 14 Oct 2010 20:52:37 +0200

On 10/14/2010 07:43 PM, j.snelders wrote:
You can find an overview of all the available field names in the Display
Filter Reference:
http://www.wireshark.org/docs/dfref/l/ldap.html

You can also use ldap.filter as a display filter, use the option -V to add
the output of the packet tree (Packet Details) and send the output to a text
file:
$ tshark -r ldap.pcap -R ldap.filter -V > ldap.txt

Yes. -V shows the search filter but I was looking for a way to print the
text representation of the filter with a user defined one-line output
format (-T fields).

Unfortunately it doesn't look like this is possible. :-(

Cheers,
--leo

On Thu, 14 Oct 2010 15:47:43 +0200 Alexander 'Leo' Bergolth wrote:

Hi!

Is there a way to display the text representation of an ldap
search-filter using tshark?

I tried -e ldap.filter but this is only a 32 bit filter element (only
the first filter element). Is there another display filter or a function
that displays a human readable version of the whole search-filter?

Cheers,
--leo
-- 
e-mail   ::: Leo.Bergolth (at) wu.ac.at
fax      ::: +43-1-31336-906050
location ::: IT-Services | Vienna University of Economics | Austria


       


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


-- 
e-mail   ::: Leo.Bergolth (at) wu.ac.at
fax      ::: +43-1-31336-906050
location ::: IT-Services | Vienna University of Economics | Austria

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: