Skip to content
Snippets Groups Projects
Commit 2279dfef authored by Mohammad Imran Syed's avatar Mohammad Imran Syed
Browse files

Update README.md

parent fe826e17
No related branches found
No related tags found
No related merge requests found
......@@ -18,7 +18,7 @@ The tool takes two traces (in csv or txt format) as input and then performs the
- wlan.frag: Fragment_number
You can use the following tshark command to extract the above mentioned fields from a pcap file. It is advisable to use tshark version 3.2.3 or lower. Version 4.2.5, for example, processes the pcap files differently and creates hex and Boolean values for frame subtype and retransmission bit respectively. Whereas, the tool expects these values to be integers.
You can use the following tshark command to extract the above mentioned fields from a pcap file. It is recommended to use tshark version 3.2.3 or lower. Version 4.2.5, for example, processes the pcap files differently and creates hex and Boolean values for frame subtype and retransmission bit respectively. Whereas, the tool expects these values to be integers.
tshark -r pcap_input_file -Y '!_ws.malformed and wlan_radio.channel==1' -T fields -E header=y -E separator=/t -e frame.number -e frame.time_epoch -e wlan.fixed.timestamp -e wlan_radio.signal_dbm -e wlan_radio.channel -e wlan.fc.type -e wlan.fc.type_subtype -e wlan.fc.retry -e wlan.fcs -e wlan.sa -e wlan.seq -e wlan.frag > csv_or_txt_output_file
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment