how to get unique ip address had udp length = 94 using tshark

asked 2018-05-09 15:16:46 +0000

logn
1 ●2 ●2 ●3

updated 2018-05-09 15:19:28 +0000

i want get ip address uninque abd had udp length = 94 usng tshark

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2018-05-09 18:57:20 +0000

Jaap

13742 ●711 ●115

tshark -r <capture file> -Y udp.length==94 -T fields -e ip.src | sort | uniq

edit flag offensive delete link

Comments

it doesn't work, tshark there is a notification that " 'uniq' is not recognized as an internal or external command, operable program or batch file.".Can u help me fix that error?

logn ( 2018-05-10 05:18:06 +0000 )edit

Run this on a GNU/Linux system and see what happens.

Jaap ( 2018-05-10 08:09:17 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-05-09 15:16:46 +0000

Seen: 295 times

Last updated: May 09 '18

how to get unique ip address had udp length = 94 using tshark edit