The command below, with tshark version 3.2.3: tshark -qtu -z conv,tcp -r file.pcap > output

gives me the output in the form (I omit the header):

10.xx.xxx.xxx:63150 <-> 10.yyy.yy.yy:104 0 0 6502 9474992 6502 9474992 05:47:57 684, 0000 10.xxx.xxx.xxx:49667 <-> 10.yy.yy.ss:104 0 0 5241 7611840 5241 7611840 09:21:49 1117,

0000

In turn, the tshark version 3.4.2 gives me another output:

10.xx.xxx.xxx:63150 <-> 10.yyy.yy.yy:104 0 0bytes 6502 9.474kB 6502 9.474kB 05:47:57 684, 0000 10.xxx.xxx.xxx:49667 <-> 10.yy.yy.ss :104 0 0bytes 5241 7.611kB 5241 7.611kB 09:21:49 1117,

0000

That is, the most recent version inserts a kB or bytes units. Is there any option to display the values like the tshark old version, with values with units?

TIA.

The command below, with tshark version 3.2.3: 3.2.3:

tshark -qtu -z conv,tcp -r file.pcap > output

10.xx.xxx.xxx:63150  <-> 10.yyy.yy.yy:104 0 0 6502 9474992 6502 9474992 05:47:57  684,
0000
10.xxx.xxx.xxx:49667 <-> 10.yy.yy.ss:104  0 0 5241 7611840 5241 7611840 09:21:49 1117,
0000

In turn, the tshark version 3.4.2 gives me another output:

10.xx.xxx.xxx:63150   <-> 10.yyy.yy.yy:104  0         0    0bytes 6502   9474992    9.474kB 6502   9474992  9.474kB 05:47:57       684,
0000
10.xxx.xxx.xxx:49667  <-> 10.yy.yy.ss:104   0         0    0bytes 5241   7611840    7.611kB 5241   7611840  7.611kB 09:21:49      1117,
 
0000
 
In turn, the tshark version 3.4.2 gives me another output:
 
10.xx.xxx.xxx:63150        <-> 10.yyy.yy.yy:104                  0 0bytes       6502 9.474kB      6502 9.474kB    05:47:57       684,
1117,
0000
10.xxx.xxx.xxx:49667        <-> 10.yy.yy.ss :104                  0 0bytes       5241 7.611kB      5241 7.611kB    09:21:49      1117,
 
0000

That is, the most recent version inserts a kB or bytes units. Is there any option to display the values like the tshark old version, with values with units?

TIA.

The command below, with tshark version 3.2.3:

tshark -qtu -z conv,tcp -r file.pcap > output

gives me the output in the form (I omit the header):

10.xx.xxx.xxx:63150  <-> 10.yyy.yy.yy:104 0 0 6502 9474992 6502 9474992 05:47:57  684,
0000
10.xxx.xxx.xxx:49667 <-> 10.yy.yy.ss:104  0 0 5241 7611840 5241 7611840 09:21:49 1117,
0000

In turn, the tshark version 3.4.2 gives me another output:

10.xx.xxx.xxx:63150  <-> 10.yyy.yy.yy:104 0 0bytes 6502 9.474kB 6502 9.474kB 05:47:57       684,
0000
10.xxx.xxx.xxx:49667 <-> 10.yy.yy.ss:104  0 0bytes 5241 7.611kB 5241 7.611kB 09:21:49      1117,
0000

That is, the most recent version inserts a kB or bytes units. Is there any option to display the values like the tshark old version, with values with pure values, without units?

TIA.

The command below, with tshark version 3.2.3:

tshark -qtu -z conv,tcp -r file.pcap > output

gives me the output in the form (I omit the header):

10.xx.xxx.xxx:63150  <-> 10.yyy.yy.yy:104 0 0 6502 9474992 6502 9474992 05:47:57  684,
0000
10.xxx.xxx.xxx:49667 <-> 10.yy.yy.ss:104  0 0 5241 7611840 5241 7611840 09:21:49 1117,
0000

In turn, the tshark version 3.4.2 gives me another output:

10.xx.xxx.xxx:63150  <-> 10.yyy.yy.yy:104 0 0bytes 0 bytes 6502 9.474kB 6502 9.474kB 05:47:57       684,
0000
10.xxx.xxx.xxx:49667 <-> 10.yy.yy.ss:104  0 0bytes 0 bytes 5241 7.611kB 5241 7.611kB 09:21:49      1117,
0000

That is, the most recent version inserts a kB or bytes units. Is there any option to display the values like the tshark old version, with pure values, without units?

TIA.