wireshark-dev October 2010 archive
Main Archive Page > Month Archives  > wireshark-dev archives
wireshark-dev: Re: [Wireshark-dev] Possible New Option for Tshar

Re: [Wireshark-dev] Possible New Option for Tshark?

From: Stephen Fisher <steve_at_nospam>
Date: Sat Oct 23 2010 - 04:43:50 GMT
To: Developer support list for Wireshark <wireshark-dev@wireshark.org>

On Thu, Oct 21, 2010 at 03:29:36PM -0500, Craig Votava wrote:

> I wrote a Perl script that feeds pcap data to an instance of tshark
> running in a child process, then takes the decoded output to present
> to the user.
>
> The problem is that I don't know when tshark is done sending output
> back to me.

How about using "pdml" or "psml" with the -T option. From the tshark
man page:

  pdml Packet Details Markup Language, an XML-based format for the
  details of a decoded packet. This information is equivalent to the
  packet details printed with the -V flag.

  psml Packet Summary Markup Language, an XML-based format for the
  summary information of a decoded packet. This information is
  equivalent to the information shown in the one-line summary printed by
  default.
___________________________________________________________________________
Sent via: Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives: http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request@wireshark.org?subject=unsubscribe