Re: Wireshark-users Digest, Vol 123, Issue 1

[Thomas Glanzmann <thomas () glanzmann de>]

Hello Noah,

> $ for x in $(tshark -r test.pcap -R "ssl.handshake.type == 1" -T fields -e
> frame.number); do echo -e $x "\t" $(tshark -r test -R "frame.number == $x"
> -d tcp.port==443,echo -T fields -e echo.data | cut -c 34-44); done

thank you for the tip. I now solved it by writing a c programm and doing
something similar.

Cheers,
        Thomas
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe