[email protected]'s profile - activity

Hi. I'm new to tshark. How do I look at bug 14691? What did you discover in 14691? I tested: tshark -r test.pcap -T fie

Hi. I tested: tshark -r test.pcap -T fields -E header=y -E separator=, -e ip.src -e ip.geoip.src_country ...the command

I will try with your "complete" example as you typed it. No reason why it shouldn't work.

Hi. Thank you for your comments. I have been using your example: tshark -r file.pcap - T fields -E separator=... and it

geo locate tshark ip address Once I have redirected a tshark file to Excel, is there a way to - geographically by countr

Will search. Thank you for your support !!!

Hi Grahamb. Hope you have time for a question. Regarding the file I was reading...the basis of my questions...I think th

Hi. Are you able to run the conv,udp command in version 3.0.0 of tshark. This would help me determine what is wrong with

tshark conversation conv command Does anyone have tshark version 3.0.0. I am reading an old capture file: tshark -r file

seems this medium is not set up to accept what I tried to type. I typed two lines which show the "lopsidedness" with 0 b

I see that it works for you. I'm using tshark version 3.0.0 so the output displays a bit different. Here are a couple of

Thank you Grahamb. I am just reading(-r) an old capture file. The info that I need is bytes sent vs bytes returned in co

tshark conversation output lopsided I am entering: tshark -r file.pcap -q -z conv,udp. Regardless of how long I let the

I realized that the ip addresses differ slightly; so they are not repeated.

tshark conversation command I am running: tshark -r file.pcap -q -z conv,udp. However, I get repeated conversations betw

Thank you for responding to my question. Please test udp on your end and tell what you get. I'm entering: tshark -r file

how do I filter conversation -conv- command any way of filtering out the "Relative Start" and "Duration" fields in the c

how do I filter conversation -conv- command any way of filtering out the "Relative Start" and "Duration" fields in the c

how do I filter conversation -conv- command any way of filtering out the "Relative Start" and "Duration" fields in the c

how do I filter conversation -conv- command any way of filtering out the "Relative Start" and "Duration" fields in the c

you asked in what context I am using the conv command. I need to detect amplification which is when an attacker spoofs i

thank you for responding. It worked just as you pointed out: tshark -r cap.pcapng -q -z conv,ip. I thought I had tried t

thank you for responding. It worked just as you pointed out: tshark -r cap.pcapng -q -z conv,ip. I thought I had tried t

Thanks for your response. -q does not work in this context. Actually, there shouldn't be a need for any additional comma

Thanks for your response. -q does not work in this context. Actually, there shouldn't be a need for any additional comma

why is -z conv,ip just reading my file frame by frame with tshark v3.0.0 with version 3.0.0 tshark should sort and produ

-z conv,ip just reads my file frame by frame with tshark version 3.0.0 -z conv,ip should or -z conv,udp should sort and