in reply to Re^3: filter tcpdump packets
in thread filter tcpdump packets

You can use them to output Wireshark's tcp.options.mss_val field.

Agreed Tshark will be helpful and more easy to implement wireshark filters. My understanding was Tshark is used with Java. Identical to Tcpdump for Perl. Definitely give a try to use Tshark in Perl. There's a Tshark PM too. I've been parsing input pcap file that don't contain mss option. here is the output with mss option.

Thank you

===output===

$VAR1 = { 'sack' => 2, 'mss' => 1460, 'ws' => 8 };

===output===