Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: Quicktip: TShark's Options -e and -T - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Quicktip: TShark's Options -e and -T

When you use TShark's option -e to display a field value, you need to include option -Tfields.

You don't actually have to memorize this, TShark will help you when you use option -e without option -T:

And by doing so, you learn about other output formats, like JSON:

 

Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com

DidierStevens

649 Posts
ISC Handler
Dec 26th 2021

Sign Up for Free or Log In to start participating in the conversation!