 | 1 | initial version |
SMP - Simple Matter of Programming (tm)
Might be slow with multiple passes of tshark but could be done with a script that grabs maximum tcp.stream number then loops through all of them.
$ tshark -r 'The Ultimate PCAP v20210721.pcapng' -T fields -e tcp.stream | sort -n | uniq| tail -1 289 $ tshark -r 'The Ultimate PCAP v20210721.pcapng' -q -z "io,stat,0,AVG(tcp.analysis.ack_rtt)tcp.analysis.ack_rtt&&tcp.stream eq 2" ========================================================================= | IO Statistics | | | | Duration: 383034710.8 secs | | Interval: 383034710.8 secs | | | | Col 1: AVG(tcp.analysis.ack_rtt)tcp.analysis.ack_rtt&&tcp.stream eq 2 | |-----------------------------------------------------------------------| | |1 | | | Interval | AVG | | |-------------------------------| | | 0.0 <> 383034710.8 | 0.023909 | | =========================================================================
| | 2 | No.2 Revision |
SMP - Simple Matter of Programming (tm)
Might be slow with multiple passes of tshark but could be done with a script that grabs maximum tcp.stream number then loops through all of them.
$ tshark -r 'The Ultimate PCAP v20210721.pcapng' -T fields -e tcp.stream | sort -n | uniq| tail -1 289 $ tshark -r 'The Ultimate PCAP v20210721.pcapng' -q -z "io,stat,0,AVG(tcp.analysis.ack_rtt)tcp.analysis.ack_rtt&&tcp.stream eq 2" ========================================================================= | IO Statistics | | | | Duration: 383034710.8 secs| | Interval: 383034710.8 secs| | | | Col 1: AVG(tcp.analysis.ack_rtt)tcp.analysis.ack_rtt&&tcp.stream eq 2 | |-----------------------------------------------------------------------| | |1 | | | Interval | AVG | | |-------------------------------| | | 0.0 <> 383034710.8 | 0.023909 || =========================================================================
