TShark output redirection

Question

I am using TShark command line in order to start new capture. If I use this command tshark.exe -w C:\test.pcap -i (my interface number) I save the capture on my hard drive and this is what need, but the output of this command shows the number of packets received, number that is updating all the time and this output I cannot get.

With this command: tshark.exe -i (my interface number) I can see the packet details, and I can get the process output in order to show it on my form (win form), and until now I could not find any command that would show me the packet details and save the capture file on my hard drive. If I use this command: tshark.exe -i (my interface number) -w C:\test.pcap I can save the capture but the output is like in the first example without the packet details. Maybe someone can help me with this?

Answer 1

Use the -V flag.

This enables verbose mode.

I would recommend this along with -x depending on the intensity and level of logging required.