Wireshark mailing list archives

Re: Shard Output Format


From: Dario Lombardo <lomato () gmail com>
Date: Fri, 13 Sep 2019 13:52:41 +0200

Which sharks commands are you using?

On Fri, Sep 13, 2019 at 1:23 PM Oliver-Tobias Ripka <otr () bockcay de> wrote:

Hello List,

I am looking to influence the output format of the sharkd json.

For example tshark -T fields -e tcp.flags.syn, formats the flag as 0 or 1

Sharkd outputs "Set", "Not Set" similar to adding a column in the
Wireshark GUI. I was looking at the function sharkd_dissect_columns in
sharkd.c but couldn't directly find an option to change the formatting.

How can I influece the behaviour of sharkd to not resolve the values
into "Set" and "Not Set"?

All the best,

Oliver
--
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org
?subject=unsubscribe



-- 

Naima is online.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: