tshark.exe -T json -V -r field text

  • retag add tags

Hi,

Is there a way to get the fields text using the -T json option to include the value of the fields description?

example: "nas_eps.nas_msg_emm_type": "72",

example when parsing the same file using just text I get the field description. NAS EPS Mobility Management Message Type: Tracking area update request (0x48)

maybe have the value as "nas_eps.nas_msg_emm_type": "Tracking area update request (72)",

Is their an option or a way to have that with -T json option. using -T ek does provide some but it is a more ELK format.

ga's avatar
1
ga
asked 2019-11-14 15:09:49 +0000, updated 2019-11-14 15:13:01 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Similar to the "showname" in "-T pdml" output?

Chuckc's avatar Chuckc (2019-11-14 16:41:13 +0000) edit

Yes to have the json format include the text meaning also.

ga's avatar ga (2019-11-14 17:08:41 +0000) edit
add a comment see more comments