Using the display filter for HTTP URI, I need to determine the number of packets returned as a result of the filter. I believe "tshark -r test.pcap -Y http.request.uri" filters the results to display the packets I need to count. "tshark -r tsharklab.pcap -Y "http.request.full_uri" -Tfields -e http.request.full_uri |sort| uniq -c" appears to provide a count for each URI but not a total count. Trying to do this in tshark, any suggestions?
