Search code examples
wiresharkpcaptcpdumptshark

How can one export the wireshark gui commands as a tshark commandline program?


If you repeat the same routines again and again it would be practical to export them as an equivalent tshark commandline program.


Solution

  • Thanks for the clarification on your question.

    And then my answer is:

    No, there is no way. tshark is not scriptable / does not have a macro language or such.

    What you could do through is pipe its output to a script/program of your own that would to the job, but that's a whole different project.

    Very important EDIT:

    I was wrong, there is a way of "scripting" wireshark / tshark.

    (I've heard of it, but never used it myself, so it did not pop in my head immediately, sorry)

    Both wireshark an tshark do have scripting capabilities using the lua language. Not sure this may suit your needs but have a look at:

    https://wiki.wireshark.org/Lua

    https://wiki.wireshark.org/Lua/Examples

    As I understand it, most of the time it's intended to be used as dissector prototyping, but it can go beyond that.

    Hope this help.