tshark conversation conv command [closed]

asked 2019-04-08 15:43:08 +0000

rvelez3@fau.edu gravatar image

Does anyone have tshark version 3.0.0. I am reading an old capture file: tshark -r file.pcap -q -z conv,udp. Just trying to get the bytes sent vs bytes returned for udp. The conv command seems to work with older version of tshark. However, with version 3.0.0 I'm getting unidirectional bytes only. Meaning that if 80 bytes are sent, 0 bytes are returned and vice versa, if 80 bytes are returned, 0 bytes were sent. If you have version 3.0.0 please test it and let me know what you get, what I'm I not doing correctly. Thanks in advance.

edit retag flag offensive reopen merge delete

Closed for the following reason duplicate question by cmaynard
close date 2019-04-08 17:29:38.524666

Comments

Duplicate of this question. Please don't re-raise the same question, instead add additional info to the original question.

grahamb gravatar imagegrahamb ( 2019-04-08 16:46:26 +0000 )edit
add a comment