Glossary: Security Monitoring and Automation

tshark

Also written: tshark -r, tshark -Y, -T fields -e

Wireshark's command-line version, easy to script. `-r` reads a capture, `-Y` applies a display filter, and `-T fields -e FIELD` prints only the named fields.