Hi,
This is a easy to do in Wireshark GUI. Problem is that I have too many Capture files and they are all big size. I want to do it with it with Tshark in a batch Script which can run overnight. Using a filter in tshark also straight forward and I was lucky to find following too for Frame Rates:
tshark -r xx.pcap -qz io,stat,1,"COUNT(frame) frame"
How is it possible to bring a criteria(filter) here with above command so that I can list a maximum Frame Rate for specific VLAN ID or? I tried using a pipe like "tshark | tshark" but seems not working.
In theory I can read & filter and create another pcap before I can use above command but I want to avoid this.
Thanks in Advance.