Ask Your Question
0

how to get unique ip address had udp length = 94 using tshark

asked 2018-05-09 15:16:46 +0000

logn gravatar image

updated 2018-05-09 15:19:28 +0000

i want get ip address uninque abd had udp length = 94 usng tshark

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2018-05-09 18:57:20 +0000

Jaap gravatar image
tshark -r <capture file> -Y udp.length==94 -T fields -e ip.src | sort | uniq
edit flag offensive delete link more

Comments

it doesn't work, tshark there is a notification that " 'uniq' is not recognized as an internal or external command, operable program or batch file.".Can u help me fix that error?

logn gravatar imagelogn ( 2018-05-10 05:18:06 +0000 )edit

Run this on a GNU/Linux system and see what happens.

Jaap gravatar imageJaap ( 2018-05-10 08:09:17 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2018-05-09 15:16:46 +0000

Seen: 293 times

Last updated: May 09 '18