I have multiple wireshark files (pcapng), and I need to have a summary of the ip adresses, ports, etc, ...
I found out that these informations can be produced in the "Statistics"->"IPv4 Statistics" menu and output to a txt/csv/xml/yaml file.
Is there any way to produce a single statistic file for multiple capture files?
I don't know if this helps, but TraceWrangler offers a multi file statistic for all files in the current file list:
To do that, run TraceWrangler, add all files you need, and select "Tools" -> "Communication Details" (available after the files were scanned once - if they're too big for automatic scan, you need to trigger the scan manually). You can export all rows of the summary to CSV via a popup menu.
Either merge the capture files before hand, or merge the statistics files afterwards.
Asked: 2018-01-17 10:02:43 +0000
Seen: 975 times
Last updated: Jan 17 '18
