Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

tshark tcp stream Raw data is not output to the end

Raw data is not output to the end command:tshark -r in.pcap -z follow,tcp,raw,0 -w f

・It is different from the result executed by this method  ->wireshark GUI -> Follow TCP Stream -> Save As [Raw] ・The output result is different between windows version tshark and Linux version tshark. ・windows version is output correctly. ・wireshark and tshark results together

Is tshark outputting raw data? Or is it a library loaded by tshark? Is it related to libpcap, for example?

Version number windows:2.6 Linux:3.03

tshark tcp stream Raw data is not output to the end

Raw data is not output to the end command:tshark -r in.pcap -z follow,tcp,raw,0 -w f

・It is different from the result executed by this method  ->wireshark GUI -> Follow TCP Stream -> Save As [Raw] [Raw]

・The output result is different between windows version tshark and Linux version tshark. tshark.

・windows version is output correctly.

・wireshark and tshark results together

Is tshark outputting raw data? Or is it a library loaded by tshark? Is it related to libpcap, for example?

Version number windows:2.6 Linux:3.03

tshark tcp stream Raw data is not output to the end

Raw data is not output to the end end.

command:tshark -r in.pcap -z follow,tcp,raw,0 -w f

・It is different from the result executed by this method method.  ->wireshark GUI -> Follow TCP Stream -> Save As [Raw]

・The output result is different between windows version tshark and Linux version tshark.

・windows version is output correctly.

・wireshark and tshark results togethertogether.

Is tshark outputting raw data? Or is it a library loaded by tshark? Is it related to libpcap, for example?

Version number windows:2.6 number

windows:2.6

Linux:3.03

tshark tcp stream Raw data is not output to the end

Raw data is not output to the end.

command:tshark -r in.pcap -z follow,tcp,raw,0 -w f

・It is different from the result executed by this method.  ->wireshark GUI -> Follow TCP Stream -> Save As [Raw]

・The output result is different between windows version tshark and Linux version tshark.

・windows version is output correctly.

・wireshark and tshark results together.

Is tshark outputting raw data? Or is it a library loaded by tshark? Is it related to libpcap, for example?

Version number

windows:2.6

Linux:3.03number ・windows:2.6 ・Linux:3.03

tshark tcp stream Raw data is not output to the end

Raw data is not output to the end.

command:tshark -r in.pcap -z follow,tcp,raw,0 -w f

・It is different from the result executed by this method.  ->wireshark GUI -> Follow TCP Stream -> Save As [Raw]

・The output result is different between windows version tshark and Linux version tshark.

・windows version is output correctly.

・wireshark and tshark results together.

Is tshark outputting raw data? Or is it a library loaded by tshark? Is it related to libpcap, for example?

Version number ・windows:2.6 ・windows:2.6

・Linux:3.03

tshark tcp stream Raw data is not output to the end

Raw data is not output to the end.

command:tshark -r in.pcap -z follow,tcp,raw,0 -w f

・It is different from the result executed by this method.  ->wireshark GUI -> Follow TCP Stream -> Save As [Raw]

・The output result is different between windows version tshark and Linux version tshark.

・windows version is output correctly.

・wireshark and tshark results together.

Is tshark outputting raw data? Or is it a library loaded by tshark? Is it related to libpcap, for example?

Version number number

・windows:2.6

・Linux:3.03

tshark tcp stream Raw data is not output to the end

Raw data is not output to the end.

command:tshark -r in.pcap -z follow,tcp,raw,0 -w f

・It is different from the result executed by this method.  ->wireshark GUI -> Follow TCP Stream -> Save As [Raw]

・The output result is different between windows version tshark and Linux version tshark.

・windows version is output correctly.

・wireshark ・windows version is wireshark and tshark results together.

Is tshark outputting raw data? Or is it a library loaded by tshark? Is it related to libpcap, for example?

Version number

・windows:2.6

・Linux:3.03

tshark tcp stream Raw data is not output to the end

Raw data is not output to the end.

command:tshark -r in.pcap -z follow,tcp,raw,0 -w > f

・It is different from the result executed by this method.  ->wireshark GUI -> Follow TCP Stream -> Save As [Raw]

・The output result is different between windows version tshark and Linux version tshark.

・windows version is output correctly.

・windows version is wireshark and tshark results together.

Is tshark outputting raw data? Or is it a library loaded by tshark? Is it related to libpcap, for example?

Version number

・windows:2.6

・Linux:3.03