Ask Your Question
0

Tshark commands lines statistics

asked 2019-06-09 23:44:33 +0000

salwa1215 gravatar image

I want to know if there are some tshark commands lines which allow get these statistics from pcap file please ?

Total packets in the forward direction Total packets in the backward direction Total size of packet in forward direction Total size of packet in backward direction Minimum size of packet in forward direction Minimum size of packet in backward direction Maximum size of packet in forward direction Maximum size of packet in backward direction Mean size of packet in forward direction Mean size of packet in backward direction ...

I did tshark -r myfile.pcap -e ip.src -e ip.dst.....But I dont know how to get the previous stat

Thanks in advance for any idea or suggestions

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-06-10 14:10:31 +0000

grahamb gravatar image

Have a look at the tshark man page and in particular the many -z options. If they don't meet your needs then you may have to use the -T fields -e... options to dump out the fields you need and then post-process the output using the scripting language of your choice.

edit flag offensive delete link more

Comments

Thanks so much grahamb

salwa1215 gravatar imagesalwa1215 ( 2019-06-12 09:12:05 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-06-09 23:44:33 +0000

Seen: 824 times

Last updated: Jun 10 '19