Ask Your Question

Revision history [back]

Tshark conversation view output modification

Hello All, I'm working with tshark to output the conversation view statistic with a command similar to: tshark -r pcap_capture.pcapng -z conv,wlan

This outputs a nice chart, but is there any configuration options for this at all? None of the other configuration options like -T or -E apply to the Conversations chart.

Does anyone know a way to configure this at all? Such as field names, delimiters, etc.?

Thank you in advance!