 | 1 | initial version |
Unfortunately it was not implemented the same way in both programs.
I see the same statistics as you in version 3.1.1 of tshark and wireshark.
https://ask.wireshark.org/question/11940/protocol-hierarchy-percent-bytes-explained/
https://www.wireshark.org/docs/man-pages/tshark.html
-z io,phs[,filter]
Create Protocol Hierarchy Statistics listing both number of packets and bytes. If no filter is specified the statistics will be calculated for all packets. If a filter is specified statistics will only be calculated for those packets that match the filter.
https://www.wireshark.org/docs/man-pages/wireshark.html
Statistics:Protocol Hierarchy
Show the number of packets, and the number of bytes in those packets, for each protocol in the trace. It organizes the protocols in the same hierarchy in which they were found in the trace.<snip>
| | 2 | No.2 Revision |
Unfortunately it was not implemented the same way in both programs.
I see the same statistics as you in version 3.1.1 of tshark and wireshark.
Wireshark does not support -z io,phs on its command line so its numbers are from the GUI.
https://ask.wireshark.org/question/11940/protocol-hierarchy-percent-bytes-explained/
https://www.wireshark.org/docs/man-pages/tshark.html
-z io,phs[,filter]
Create Protocol Hierarchy Statistics listing both number of packets and bytes. If no filter is specified the statistics will be calculated for all packets. If a filter is specified statistics will only be calculated for those packets that match the filter.
https://www.wireshark.org/docs/man-pages/wireshark.html
Statistics:Protocol Hierarchy
Show the number of packets, and the number of bytes in those packets, for each protocol in the trace. It organizes the protocols in the same hierarchy in which they were found in the trace.<snip>