Ask Your Question

Revision history [back]

Starting wireshark with a particular column ordered?

When invoked, wireshark displays packets in arrival order i.e. ordered by packet_num. I would like to invoke wireshark such that it starts displaying packets in order w.r.t. a particular column as it receives them. The wireshark is going to receive pcap-ng packets from a pipe.

Current command:

$ wireshark -r in_pipe

Desired command:

$ wireshark -r in_pipe display_order:absolute_timestamp

Is there a facility that allows us to do this?