Tshark显示vxlan内层报文的tcp option

tshark是wireshark的linux版本，用来解析各种包很方便
现在又跟需求，是显示vxlan的内层tcp包的option，但是option只有在syn和ack里有

操作命令如下： tshark更详细的参数，请参考帮助

[root@vm100-1-3-198 ~]# tshark -nnlr tengine.pcap -d udp.port==4789,vxlan -Tfields -E header=y -Eheader=y -e tcp.options -R “tcp.flags.syn == 1 or tcp.flags.ack == 1”
Running as user “root” and group “root”. This could be dangerous.
tcp.options
02:04:05:b4:01:01:04:02:01:03:03:07
eb:08:12:b5:0a:0d:21:0a:02:04:05:b4:01:01:04:02:01:03:03:0b
02:04:05:b4:01:01:04:02:01:03:03:07
02:04:05:b4:01:01:04:02:01:03:03:07
eb:08:12:b5:0a:0d:21:0a:02:04:05:b4:01:01:04:02:01:03:03:0b
02:04:05:b4:01:01:04:02:01:03:03:07
02:04:05:b4:01:01:04:02:01:03:03:07
eb:08:12:b5:0a:0d:21:0a:02:04:05:b4:01:01:04:02:01:03:03:0b
02:04:05:b4:01:01:04:02:01:03:03:07
02:04:05:b4:01:01:04:02:01:03:03:07
02:04:05:b4:01:01:04:02:01:03:03:07

其中原始报文如