Revision history  [back]

tshark is the command line version of Wireshark and it can be called from a script and then the output processed by the script.

Your favourite Internet search engine should give lots of info if you search for tshark and your script language of choice.