THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question

Revision history  [back]

Revision 1
gaddman's avatar
1
gaddman
answered 2018-06-23 19:30:43 +0000

If the fields already exist, then can you do something like this?

tshark -T fields -e ip.hdr_len -e tcp.hdr_len -e ipv6.hopopts

If that doesn't work and you're comfortable with LUA dissectors, you could use a post-dissector to grab the info you need.