0

I can display the source and destination tcp ports with 

tshark -T fields -e tcp.port 1111,2222 2222,1111 [...]

How can I display only the source port in order to get 

1111 2222
Improve this question

1 Answer 1

Reset to default
4

Like this

tshark -e tcp.srcport -T fields
Improve this answer
1
  • And the way to find it - is via tshark -G. This will print all possible supported fields and then you just search in the output field that interests you Commented Nov 11, 2016 at 23:04

You must log in to answer this question.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.