I have a requirement to produce a report that lists all outgoing destinations and their ports from the a given pcap file. I am using tshark to analyze the pcap file and in the past used the simple -z hosts option. I do not know how to get the ports to show up as well. Does anyone know how to make this work? My initial code is below. tshark -r file.pcap -q -z hosts > output.txt Thanks Sean asked 14 Jun '14, 11:39  sean_hoo |
One Answer:
tshark -r input.cap.pcapng -q -z conv,tcp > output.txt answered 14 Jun '14, 22:20  kishan pandey |
@kishan pandey: I converted your comment to an answer, as it is a valid answer. Please read the FAQ for how this site works ;-)