Re: how to show protocol with tshark

[Jeff Morriss <jeff.morriss.ws () gmail com>]

nangergong wrote:
> HI, all:
>
>      In wireshark, I can see protocol names such as 
> "TCP","UDP","DHCPV6", "LLMNR", is it possible to use tshark to show 
> these protocol names, especially with "-e", thanks!

Does this do what you want?

tshark -T fields -eframes.protocols -nr /path/to/file.pcap
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org?subject=unsubscribe