First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

Unknown protocol -- "pn_rt"

  • retag add tags

i am in linux environment ,when i run command below

[test@pekphispre03021 test]$ tshark -r test.pcapng -d ethertype==0x8892,pn_rt -T fields -e _ws.col.Source -e _ws.col.Destination -e _ws.col.Protocol -E header=n -E separator=, -E occurrence=f

tshark: Unknown protocol -- "pn_rt"

tshark: Valid protocols for layer type "ethertype" are:
....

how to resolve this problem?

zmmmm's avatar
1
zmmmm
asked 2021-04-15 06:56:04 +0000
grahamb's avatar
23.8k
grahamb
updated 2021-04-15 08:06:34 +0000
edit flag offensive 0 remove flag close merge delete

Comments

tshark version info?

grahamb's avatar grahamb (2021-04-15 08:06:11 +0000) edit

version 3.4.3

zmmmm's avatar zmmmm (2021-04-15 08:22:37 +0000) edit
add a comment see more comments

1 Answer

0

Works for me. Profinet is provided by a plugin dissector, I suspect the tshark instance you're running somehow doesn't have that plugin available.

What does the following command show:

tshark -G plugins
grahamb's avatar
23.8k
grahamb
answered 2021-04-15 09:17:09 +0000
edit flag offensive 0 remove flag delete link

Comments

thank you ,i find the plugins directory has no permission,then i modify it ,done.

zmmmm's avatar zmmmm (2021-04-15 09:54:56 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer