Ask Wireshark - RSS feedhttps://ask.wireshark.org/questions/Wireshark questions and answersenCopyright Wireshark Foundation, 2017-2020Sat, 15 Dec 2018 21:20:55 +0000Is there any possibilities to extract pcap files to get 5 tuples then change it into txt file for Statistical Machine Learning?https://ask.wireshark.org/question/6451/is-there-any-possibilities-to-extract-pcap-files-to-get-5-tuples-then-change-it-into-txt-file-for-statistical-machine-learning/Hello,
For introduction I'm a newbie here and need some lead of you guys.
Okay, i would like to ask if there's any possibilities for me to do statistical machine learning on WEKA by extracting the pcap files format to get the 5 tuples using wireshark?
I want to do the classification of traffic network using supervised data and statistical machine learning method but get stuck on getting the 5 tuples of the whole pcap files.
Thank you so much, much appreciated!Sat, 15 Dec 2018 15:59:03 +0000https://ask.wireshark.org/question/6451/is-there-any-possibilities-to-extract-pcap-files-to-get-5-tuples-then-change-it-into-txt-file-for-statistical-machine-learning/Answer by grahamb for <p>Hello, </p>
<p>For introduction I'm a newbie here and need some lead of you guys.</p>
<p>Okay, i would like to ask if there's any possibilities for me to do statistical machine learning on WEKA by extracting the pcap files format to get the 5 tuples using wireshark?</p>
<p>I want to do the classification of traffic network using supervised data and statistical machine learning method but get stuck on getting the 5 tuples of the whole pcap files.</p>
<p>Thank you so much, much appreciated!</p>
https://ask.wireshark.org/question/6451/is-there-any-possibilities-to-extract-pcap-files-to-get-5-tuples-then-change-it-into-txt-file-for-statistical-machine-learning/?answer=6455#post-id-6455Use tshark and the `-T` fields option to extract the 5-tuple, i.e.
tshark -r your.pcap -T fields -e ip.proto -e ip.src -e ip.dst -e tcp.srcport -e tcp.dstportSat, 15 Dec 2018 21:20:55 +0000https://ask.wireshark.org/question/6451/is-there-any-possibilities-to-extract-pcap-files-to-get-5-tuples-then-change-it-into-txt-file-for-statistical-machine-learning/?answer=6455#post-id-6455