I/O Graph on windows in Tshark
I want to get .csv files from I/O graphs for a large number of files .pcap, can I automate this with Thsark? I didn't find anything working under windows 10 on the Internet.
I want to get .csv files from I/O graphs for a large number of files .pcap, can I automate this with Thsark? I didn't find anything working under windows 10 on the Internet.
Look at -z io,stat,interval[,filter][,filter][,filter]…
in the tshark man page.
It's not CSV
so the output will need to be reformatted.
(similar question asking for CSV
output: How to convert TCP flows in .pcap file to .csv file)
$ tshark -r ./stream-0.pcap -z io,stat,1,"COUNT(frame)frame","COUNT(frame)tcp","COUNT(frame)http" -q ==================================== | IO Statistics | | | | Duration: 5.300276 secs | | Interval: 1 secs | | | | Col 1: COUNT(frame)frame | | 2: COUNT(frame)tcp | | 3: COUNT(frame)http | |----------------------------------| | |1 |2 |3 | | Interval | COUNT | COUNT | COUNT | |----------------------------------| | 0 <> 1 | 8 | 8 | 2 | | 1 <> 2 | 0 | 0 | 0 | | 2 <> 3 | 0 | 0 | 0 | | 3 <> 4 | 0 | 0 | 0 | | 4 <> 5 | 0 | 0 | 0 | | 5 <> Dur| 4 | 4 | 0 | ==================================== $
Please start posting anonymously - your entry will be published after you log in or create a new account.
Asked: 2022-03-14 05:57:33 +0000
Seen: 392 times
Last updated: Mar 14 '22
Wireshark 2.4.1 GTK Crash on long run
wifi disconnects as wireshark starts
Deduplication in tshark -T ek [closed]
filtering out protocol, sequence number, and ack using tshark
what determines the final windows scaling factor?
Using tshark filters to extract only interesting traffic from 12GB trace
Failed to run MSBuild command (CMake Error at CMakeLists.txt:22 (project))
No CMAKE_C(XX)_COMPILER could be found
I am having trouble with Wireshark starting using Windows 10.