|Main Archive Page > Month Archives > wireshark-users archives|
On 10/14/2010 07:43 PM, j.snelders wrote:
> You can find an overview of all the available field names in the Display
> Filter Reference:
> You can also use ldap.filter as a display filter, use the option -V to add
> the output of the packet tree (Packet Details) and send the output to a text
> $ tshark -r ldap.pcap -R ldap.filter -V > ldap.txt
Yes. -V shows the search filter but I was looking for a way to print the
text representation of the filter with a user defined one-line output
format (-T fields).
Unfortunately it doesn't look like this is possible. :-(
> On Thu, 14 Oct 2010 15:47:43 +0200 Alexander 'Leo' Bergolth wrote:
>> Is there a way to display the text representation of an ldap
>> search-filter using tshark?
>> I tried -e ldap.filter but this is only a 32 bit filter element (only
>> the first filter element). Is there another display filter or a function
>> that displays a human readable version of the whole search-filter?
>> e-mail ::: Leo.Bergolth (at) wu.ac.at
>> fax ::: +43-1-31336-906050
>> location ::: IT-Services | Vienna University of Economics | Austria
> Sent via: Wireshark-users mailing list <firstname.lastname@example.org>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
-- e-mail ::: Leo.Bergolth (at) wu.ac.at fax ::: +43-1-31336-906050 location ::: IT-Services | Vienna University of Economics | Austria ___________________________________________________________________________ Sent via: Wireshark-users mailing list <email@example.com> Archives: http://www.wireshark.org/lists/wireshark-users Unsubscribe: https://wireshark.org/mailman/options/wireshark-users mailto:firstname.lastname@example.org?subject=unsubscribe