THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.

Ask Your Question

Revision history [back]

Revision 2

updated 2021-03-14 15:10:06 +0000

You could parse it out of frame.protocols or specify a list of fields with -e options including _ws.col.Protocol.
If you search for _ws.col.Protocol here on the Q&A site there are examples.
tshark man page

Revision 1

answered 2021-03-14 15:09:30 +0000

You could parse it out of frame.protocols or specify a list of fields with -e options including _ws.col.Protocol.
If you search for _ws.col.Protocol here on the Q&A site there are ~~examples.~~ examples using _ws.col.Protocol.
tshark man page