Ask Your Question
0

I/O Graph on windows in Tshark

asked 2022-03-14 05:57:33 +0000

p4shark gravatar image

I want to get .csv files from I/O graphs for a large number of files .pcap, can I automate this with Thsark? I didn't find anything working under windows 10 on the Internet.

edit retag flag offensive close merge delete

1 Answer

Sort by » oldest newest most voted
0

answered 2022-03-14 15:49:08 +0000

Chuckc gravatar image

updated 2022-03-14 15:49:50 +0000

Look at -z io,stat,interval[,filter][,filter][,filter]…​ in the tshark man page.
It's not CSV so the output will need to be reformatted.
(similar question asking for CSV output: How to convert TCP flows in .pcap file to .csv file)

$ tshark -r ./stream-0.pcap -z io,stat,1,"COUNT(frame)frame","COUNT(frame)tcp","COUNT(frame)http" -q

====================================
| IO Statistics                    |
|                                  |
| Duration: 5.300276 secs          |
| Interval: 1 secs                 |
|                                  |
| Col 1: COUNT(frame)frame         |
|     2: COUNT(frame)tcp           |
|     3: COUNT(frame)http          |
|----------------------------------|
|          |1      |2      |3      |
| Interval | COUNT | COUNT | COUNT |
|----------------------------------|
|  0 <> 1  |     8 |     8 |     2 |
|  1 <> 2  |     0 |     0 |     0 |
|  2 <> 3  |     0 |     0 |     0 |
|  3 <> 4  |     0 |     0 |     0 |
|  4 <> 5  |     0 |     0 |     0 |
|  5 <> Dur|     4 |     4 |     0 |
====================================
$
edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2022-03-14 05:57:33 +0000

Seen: 388 times

Last updated: Mar 14 '22