Tshark LUA Script
I am trying to run a Lua script (filtcols.lua) from tshark
in the same way as I do from the Wireshark GUI (filtcols.info contains "string"), but I am getting a syntax error. How can I do that in the tshark
?
Comments
filtcols is a work around for fields that are available in
tshark
but not inwireshark
.Any reason for not using the
_ws.col
fields intshark
?$ tshark -r captureFile.pcap -T fields -e _ws.col.Protocol -e _ws.col.Info