|
Hello, I have to filter and find if in the Trace we get 2 packets with same IP ID. (Ofcourse i dont know the IP ID in advance else its a simple filter). So, an example: I have a 10,000 packets trace, i should show packets only which have same IP ID repeated. How can i do it ? Regards, TA. |
|
What about starting with TShark, part of the Wireshark distribution, to create a list of ip.id's: Output:
824
107 0x0000
11 0x18e9
10 0x1a6d
10 0x1a69
10 0x1a63
10 0x1a61
10 0x1a35
10 0x18d4
9 0x1ac2
etc.
Hope this helps. |
|
Ankur, You may find this useful. I had a same query and mate can address this pretty well. Hope this helps. Regards, -Deepak |
