Wireshark mailing list archives
Re: Possible New Option for Tshark?
From: Stephen Fisher <steve () stephen-fisher com>
Date: Fri, 22 Oct 2010 22:43:50 -0600
On Thu, Oct 21, 2010 at 03:29:36PM -0500, Craig Votava wrote:
I wrote a Perl script that feeds pcap data to an instance of tshark running in a child process, then takes the decoded output to present to the user. The problem is that I don't know when tshark is done sending output back to me.
How about using "pdml" or "psml" with the -T option. From the tshark man page: pdml Packet Details Markup Language, an XML-based format for the details of a decoded packet. This information is equivalent to the packet details printed with the -V flag. psml Packet Summary Markup Language, an XML-based format for the summary information of a decoded packet. This information is equivalent to the information shown in the one-line summary printed by default. ___________________________________________________________________________ Sent via: Wireshark-dev mailing list <wireshark-dev () wireshark org> Archives: http://www.wireshark.org/lists/wireshark-dev Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
Current thread:
- Possible New Option for Tshark? Craig Votava (Oct 22)
- Re: Possible New Option for Tshark? Stephen Fisher (Oct 22)
- Re: Possible New Option for Tshark? Guy Harris (Oct 22)
- Re: Possible New Option for Tshark? Mark Landriscina (Oct 24)
- Re: Possible New Option for Tshark? Guy Harris (Oct 22)
- <Possible follow-ups>
- Re: Possible New Option for Tshark? Craig Votava (Oct 26)
- Re: Possible New Option for Tshark? Stephen Fisher (Oct 26)
- Re: Possible New Option for Tshark? Stephen Fisher (Oct 22)