 | 1 | initial version |
What I would do is to run tshark with a display filter (using the -Y parameter) that limits the packets for which values are exported. You could either use a tuple filter, specifying both IPs and ports, or simply use the stream index filter, e.g.
tcp.stream==1
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.