Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

What I would do is to run tshark with a display filter (using the -Y parameter) that limits the packets for which values are exported. You could either use a tuple filter, specifying both IPs and ports, or simply use the stream index filter, e.g.