Revision history  [back]

I need to extract ascii from udp payload and use command

tshark  -r filename.pcap -z"follow,udp,ascii,0" > logfile

This command mostly works but not when pcap has multiple udp streams, in such case it exports only the first one, how can I extract all udp streams from pcap? including damaged ones?