tshark programin help

[spinnjcg]

I want to create a tshark filter that allow me to see only the last octet from the ip addrress. more or less like this. I have a capture and i want a filter that only display the last 3 number from the ip.
If i have like 192.168.10.1 i want just to see the number 1.

Thanks

[tpl]

welcome to the forum

if the file containing 192.168.10.1 is called "a"
then something like this should work:

cut -d . -f 4 <a

[spinnjcg]

thanks for the help. it works. But there is a problem. i would like to do it with tshark. and in any case i need to save the result in a .txt format.

[tpl]

cut -d . -f 4 <a >a.txt

"tshark" unknown--what does the output look like?

[spinnjcg]

The cut process isn't the fast way to do what i want, but it works just fine.
Once again thanks.