Revision history [back]

I have a large pcap file and I have some session about 10 session. But i don't know they're TCP or UDP. With -Y thsark has tcp.dstport or tsc.scrport.
I have to find out my session is TCP or UDP. How can I find out trasnmission protol how find out my port is TCP or UDP?

I have a large pcap file and I have some session about 10 session. But i I don't know they're TCP or UDP. With -Y thsarktshark has tcp.dstport or tsc.scrporttcp.scrport.
I have to find out my session is TCP or UDP. How can I find out trasnmission protol how transmission protocol? How find out my port is TCP or UDP?

ip.src I can access to port src without mention to tcp or udp.