tshark with filter to CSV producing output for every packet

tshark
csv
retag add tags

i'm using tshark to filter on dissector fields. This works BUT packets excluded by the filter still produce a line output with what seems to be the packet size. Therefore post-processing is necessary to clean up the CSV file.

Sample tshark output: 7321

8161

186

21.909215000,46.9410915740944,-119.253969718347

186

21.999966000,46.9411354379834,-119.255116969599

204

7321

8161

186

22.408871000,46.9411012325238,-119.254331354686

204

The lines with just the single number should be filtered out but are present in the tshark output

tdrice

asked 2022-12-08 02:15:16 +0000

edit flag offensive 0 remove flag close merge delete

Comments

What's your tshark version and command line used?

grahamb (2022-12-08 09:49:49 +0000) edit

Did you use a display filter (-Y) to output only the packets of interest?

André (2022-12-09 21:40:21 +0000) edit

add a comment see more comments

Be the first one to answer this question!

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

tshark with filter to CSV producing output for every packet edit

Comments

Be the first one to answer this question!

tshark with filter to CSV producing output for every packet