| 2021-12-22 03:05:20 +0000 | marked best answer | Disabling "Analyze TCP sequence numbers" in tshark I'm trying to parse the output of tshark when reading in a pcap file. I can do this just fine in some pcaps, but if a pcap has some suspected out of order frames, then the payload is not dumped once the tcp analysis detects a problem. This is solved in wirshark by disabling "Analyze TCP sequence numbers" in the TCP preferences. How do I do the same for tshark when reading a pcap file? |
| 2021-12-22 03:05:20 +0000 | received badge | ● Scholar (source) |
| 2021-12-22 03:05:10 +0000 | commented answer | Disabling "Analyze TCP sequence numbers" in tshark Thank you very much! This works perfectly! |
| 2021-12-22 00:38:30 +0000 | asked a question | Disabling "Analyze TCP sequence numbers" in tshark Disabling "Analyze TCP sequence numbers" in tshark I'm trying to parse the output of tshark when reading in a pcap file. |