networking - Getting particular information out of pcap files -

networking - Getting particular information out of pcap files -

i interested in particular info in .pcap (frame control field). want extract text file , graph plotting using extracted data. can export text file using wireshark looking automating process.

as of know tshark can used convert .pcap text files outputs whole packet. instead interested in 1 particular information.

is there nice way this.

is there nice way this.

could be.

if field wish extract has filter, can utilize tshark output field using -t , -e switches;

tshark -tfields -e tcp.port -r ....

see tshark -h details...

to utilize wireshark see name field, click on field in details pane , note field name shown in bottom status bar.

which field(s) want ? protocol ?

networking wifi wireshark tshark 802.11