Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Wireshark filter question
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
hex4def6
n00b
n00b


Joined: 13 Mar 2004
Posts: 39
Location: Pleasanton, CA

PostPosted: Tue Jun 26, 2007 6:07 pm    Post subject: Wireshark filter question Reply with quote

Hi,

I'm trying to grap RSSI values out of captured packets using wireshark (actually, tshark), but I don't understand how to set up filters that well:

currently I'm using a hackish method:

tshark -i ath0 -V | grep RSSI

but I'd like to set up a filter instead. I've discovered something called prism.rssi.data, which I think is what I need. How would I use that as a filter?


Thanks
_________________
The following sentence is false. The preceeding sentence is true.
Back to top
View user's profile Send private message
no_hope
Guru
Guru


Joined: 23 Jun 2003
Posts: 482

PostPosted: Tue Jun 26, 2007 7:33 pm    Post subject: Reply with quote

AFAIK you can't tell tshark to only output RSSI values or any other field alone. The purpose of filters is restrict the set of displayed packets (e.g. just show frames with RSSI > 50), not to specify which fields to display.

You can use -V and -x flags to control verbosity, that's all tshark will do for you.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum