session and distinguish TCP or UDP
I have a large pcap file and I have some session about 10 session. But I don't know they're
TCP or UDP. With -Y
tshark
has tcp.dstport
or tcp.scrport
.
I have to find out my session is TCP or UDP. How can I find out transmission protocol? How find out my port is TCP or UDP?
ip.src I can access to port src without mention to tcp or udp.