'How to remove colon in the tcp payload using Tshark?

I run the following

sudo tshark -c 100 -f "tcp port 80"  -T json -e tcp.payload

and one of the fields I am interested in is tcp.payload and I get it in the below format

{"tcp.payload": "7b:22:6e:61:6d:65:22:3a:20:22:68:65:6c:6c:6f:22:7d"}

How can I get it in the two formats below?

  1. {"tcp.payload": "7b226e616d65223a202268656c6c6f227d"}
  2. {"tcp.payload": {"name": "hello"}}
wiresharktshark


Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source

Related Questions